CVE-2024-55565

MEDIUM

nanoid 4.0.0-5.0.8 - Denial of Service via Non-Integer Value Mishandling

Title source: llm

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Core 5

Core References

Various Sources

Mailing List

Mailing List

Issue Tracking

Release Notes

CVSS v3 4.3

EPSS 0.0067

EPSS Percentile 46.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-835

Status published

Products (1)

npm/nanoid 4.0.0 - 5.0.9npm

Published Dec 09, 2024

Tracked Since Feb 18, 2026