4.0
Medium
CVE-2021-23566 The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function…
Description
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nanoid 3.1 | earliest → < 3.1.31 | 3.1.31 |