nanoid vulnerabilities

2 known vulnerabilities in nanoid from Nanoid Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  nanoid: Loop with Unreachable Exit Condition

  CVE-2026-67214Jul 29, 2026Nanoid Project

  nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative size, the loop counter is decremented from a negative value a

• 7.5 High severity

  nanoid: Loop with Unreachable Exit Condition

  CVE-2026-67213Jul 29, 2026Nanoid Project

  nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the