{"action":"Upgrade nanoid to 3.3.8 or later.","affected":[{"fixed":"5.0.9","introduced":"4.0.0"},{"fixed":"3.3.8","introduced":"0"}],"component":"nanoid","cve_ids":["CVE-2024-55565"],"ecosystem":"npm","epss":0.00665,"exploited":false,"fixed_versions":["5.0.9","3.3.8"],"ghsa_id":"GHSA-mwcw-c2x4-8c55","id":"tcs_01M5KG1WWX8TQ6M6KQPSX0E5EY","modified_at":"2026-09-10T03:50:21.666094798Z","published_at":"2024-12-09T03:30:59Z","references":["https://osv.dev/vulnerability/GHSA-mwcw-c2x4-8c55","https://nvd.nist.gov/vuln/detail/CVE-2024-55565","https://github.com/ai/nanoid/pull/510","https://github.com/ai/nanoid","https://github.com/ai/nanoid/compare/3.3.7...3.3.8","https://github.com/ai/nanoid/releases/tag/5.0.9","https://lists.debian.org/debian-lts-announce/2024/12/msg00025.html","https://lists.debian.org/debian-lts-announce/2025/01/msg00006.html"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-mwcw-c2x4-8c55","url":"https://osv.dev/vulnerability/GHSA-mwcw-c2x4-8c55"}],"summary":"Predictable results in nanoid generation when given non-integer values"}