CVE-2024-55565

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-55565

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-55565.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-55565

Aliases

GHSA-mwcw-c2x4-8c55

Related

Published

2024-12-09T02:15:19Z

Modified

2025-01-15T05:16:28.023424Z

Summary

[none]

Details

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

References

Affected packages

Debian:11 / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/debian/node-mocha?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.2.1+ds1+~cs29.4.27-3+deb11u1

Affected versions

8.*

8.2.1+ds1+~cs29.4.27-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/debian/node-mocha?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.1.4+ds1+~cs28.2.8-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / node-mocha

Package

Name: node-mocha
Purl: pkg:deb/debian/node-mocha?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.1.4+ds1+~cs28.2.8-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/debian/node-postcss?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.2.1+~cs5.3.23-8+deb11u1

Affected versions

8.*

8.2.1+~cs5.3.23-8

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/debian/node-postcss?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.4.20+~cs8.0.23-1

8.4.31+~cs8.0.26-1

8.4.39+~cs9.2.29-1

8.4.49+~cs9.2.32-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / node-postcss

Package

Name: node-postcss
Purl: pkg:deb/debian/node-postcss?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.4.49+~cs9.2.32-1

Affected versions

8.*

8.4.20+~cs8.0.23-1

8.4.31+~cs8.0.26-1

8.4.39+~cs9.2.29-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/ai/nanoid

Affected ranges

Type: GIT
Repo: https://github.com/ai/nanoid
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

65a38ac63a0709c420b9de30b15511b84e87c423

Affected versions

0.*

0.1.0

0.1.1

0.2.0

0.2.1

0.2.2

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.1.0

1.1.1

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.1.0

2.1.1

2.1.10

2.1.11

2.1.2

2.1.3

2.1.4

2.1.5

2.1.6

2.1.7

2.1.8

2.1.9

3.*

3.0.0

3.0.1

3.0.2

3.1.0

3.1.1

3.1.10

3.1.11

3.1.12

3.1.13

3.1.14

3.1.15

3.1.16

3.1.17

3.1.18

3.1.19

3.1.2

3.1.20

3.1.21

3.1.22

3.1.23

3.1.24

3.1.25

3.1.26

3.1.27

3.1.28

3.1.29

3.1.30

3.1.31

3.1.32

3.1.4

3.1.5

3.1.6

3.1.7

3.1.8

3.1.9

3.2.0

3.3.0

3.3.1

3.3.2

3.3.3

3.3.4

3.3.5

3.3.6

3.3.7

3.3.8

4.*

4.0.0

4.0.1

4.0.2

5.*

5.0.0

5.0.1

5.0.2

5.0.3

5.0.4

5.0.5

5.0.6

5.0.7

5.0.8