crates.io/nano-id CVE-2024-36400: critical 9.4, EPSS 0.75%

Reduced entropy due to inadequate character set usage

Action: Upgrade nano-id to 0.4.0 or later.

cargo update -p nano-id --precise 0.4.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2024-0343
• https://crates.io/crates/nano-id
• https://rustsec.org/advisories/RUSTSEC-2024-0343.html

CVE-2024-36400 · published 2024-06-03T12:00:00Z · modified 2024-06-15T13:27:23.912492Z · JSON