nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corrupt the process-wide CSPRNG poolOffset in fillPool(), which causes subsequent session tokens, CSRF tokens, API keys, and unique identifiers to become the deterministic string "uuuuuuuuuuuuuuuuuuuuu" until the process restarts. This issue is fixed in versions 3.3.12 and 5.1.11.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | Sep 16, 2026 | Sep 15, 2026 |
| Debian | — | Upgrade node-mocha | Aug 12, 2026 | Aug 12, 2026 |
| Redhat_linux | — | Upgrade python3-sqlparseUpgrade automation-platform-uiUpgrade python3.12-django-ansible-baseUpgrade python3.12-django-ansible-base+rbacUpgrade automation-gateway-configUpgrade receptor-debuginfoUpgrade automation-controller-cliUpgrade automation-eda-controller-event-stream-servicesUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3.12-django-ansible-base+api_documentationUpgrade automation-eda-controllerUpgrade automation-gateway-proxyUpgrade aap-metrics-utilityUpgrade automation-controller-venv-towerUpgrade automation-gateway-proxy-server-debuginfoUpgrade python3.12-django-ansible-base+resource_registryUpgrade automation-controller-serverUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-django-ansible-base+feature_flagsUpgrade automation-eda-controller-base-servicesUpgrade python3.12-django-ansible-base+redis_clientUpgrade receptorUpgrade automation-hubUpgrade python3.12-django-ansible-base+activitystreamUpgrade automation-eda-controller-worker-servicesUpgrade automation-gateway-proxy-serverUpgrade python3.12-gitpythonUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade automation-controller-uiUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-gateway-proxy-debugsourceUpgrade receptorctlUpgrade automation-controllerUpgrade receptor-debugsourceUpgrade python3.12-django-ansible-base+rest_filtersUpgrade automation-eda-controller-baseUpgrade automation-gateway-serverUpgrade automation-gatewayNo solution existsUpgrade python3.12-sqlparseUpgrade python3.12-galaxy-ng | Aug 17, 2026 | Aug 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub