5.5
CVE-2021-23566
- EPSS 0.03%
- Veröffentlicht 14.01.2022 20:15:10
- Zuletzt bearbeitet 03.11.2025 22:15:47
- Quelle report@snyk.io
- CVE-Watchlists
- Unerledigt
LoginThe package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nanoid Project ≫ Nanoid SwPlatformnode.js Version >= 3.0.0 < 3.1.31
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.074 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
| report@snyk.io | 4 | 2.5 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-704 Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.