Medium DLA-4013-1 2 CVEs

node-mocha - security update

Published Jan 11, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	node-mocha	8.2.1+ds1+~cs29.4.27-3+deb11u1

Vulnerabilities 2

Medium 4.3

CVE-2024-55565

Predictable results in nanoid generation when given non-integer values

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas katib-suggestion-skopt-enas Debian Ubuntu Wolfi npm

Dec 9, 2024
Medium 4.0

CVE-2021-23566

Information Exposure

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

node-postcss node-postcss node-mocha nanoid Debian Ubuntu npm

Jan 14, 2022