nanoid vulnerabilities

CVEs whose affected-version data names the nanoid package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73086High· 7.4

1mo ago

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, …

▾ Twilightnanoid · nanoidEPSS 0.30%via NVD