Vulnerability

CVE-2024-55565

 Report advisory or correction

CVSS Score 6.9 medium

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CWE

CWE-835

References

https://github.com/ai/nanoid/pull/510
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-55565

[CVE-2024-55565] CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Description

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

See nanoid package information