Skip to content
OpenAdvisories

Package · Debian

node-mocha

5 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    nanoid: Integer Overflow or Wraparound

    nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 21…