Vulnerable package: nanoid
2 high/high advisory entries reported by pnpm audit.
| Severity |
Title |
Vulnerable |
Patched |
Advisory |
| high |
nanoid: non-secure generators can loop indefinitely with negative size |
<3.3.16 |
>=3.3.16 |
1138811 |
| high |
nanoid: custom generators can loop indefinitely when size is zero |
<3.3.17 |
>=3.3.17 |
1138813 |
Suggested action
Run pnpm update nanoid and verify with pnpm build. If the patched version is a major upgrade, check release notes for breaking changes first. Close this issue once the package is on a non-vulnerable version (the bot will re-open if new advisories appear).
Vulnerable package:
nanoid2 high/high advisory entries reported by
pnpm audit.<3.3.16>=3.3.16<3.3.17>=3.3.17Suggested action
Run
pnpm update nanoidand verify withpnpm build. If the patched version is a major upgrade, check release notes for breaking changes first. Close this issue once the package is on a non-vulnerable version (the bot will re-open if new advisories appear).