Releases129
Frequency3 weeks 4 days
Last Release
A tiny (118 bytes), secure URL-friendly unique string ID generator

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
>= 3.0.0, < 3.1.314 MEDIUM2.1 LOW

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.