CVE-2024-55565
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.
- Published Dec 9, 2024
- CVSS 4.3 medium
- 0.7% chance of exploitation in the next 30 days (EPSS)
- A fix is available
In the news
- Multiple vulnerabilities in IBM products CERT-FR ·