Skip to content

[security] high: 2 advisories in nanoid #48

Description

@github-actions

Vulnerable package: nanoid

2 high/high advisory entries reported by pnpm audit.

Severity Title Vulnerable Patched Advisory
high nanoid: non-secure generators can loop indefinitely with negative size <3.3.16 >=3.3.16 1138811
high nanoid: custom generators can loop indefinitely when size is zero <3.3.17 >=3.3.17 1138813

Suggested action

Run pnpm update nanoid and verify with pnpm build. If the patched version is a major upgrade, check release notes for breaking changes first. Close this issue once the package is on a non-vulnerable version (the bot will re-open if new advisories appear).

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions