CVE-2021-23566: Nanoid Project Nanoid

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

Affected products

• Nanoid Project Nanoid: from 3.0.0, before 3.1.31 (fixed in 3.1.31)

Published 2022-01-14. Last modified 2026-06-17.