Launchpad.net

CVE 2021-23566

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

See the CVE page on Mitre.org for more details.