Information Exposure
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for node-mocha in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
Check your installed stack and versions against the current vulnerability feeds.