Skip to content
OpenAdvisories

Package · Ubuntu

node-mocha

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.4
    CVE-2026-73086

    nanoid: Integer Overflow or Wraparound

    nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 21…

    ai nanoid node-postcss node-postcss Debian Ubuntu npm
  • Medium 4.0
    CVE-2021-23566

    Information Exposure

    The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

    node-postcss node-postcss node-mocha nanoid Debian Ubuntu npm