Threats tagged 'ghsa-mwcw-c2x4-8c55'

CVE-2024-55565 is a vulnerability in the nanoid library where passing fractional (non-integer) values to the nanoid function causes various undesirable behaviors. In browser environments, this can lead to an infinite loop. In Node.js, fractional values cause the internal poolOffset to become fractional, resulting in nanoid returning zeroes until the pool is refilled. Additionally, if the first call in Node.js uses a fractional argument, buffer allocation fails with an error. Versions 3.3.8 and 5.0.9 contain fixes for these issues.