CyberRota Analysis
AI-GeneratedThe nanoid library for JavaScript, prior to versions 3.3.12 and 5.1.11, is vulnerable due to improper handling of the user-influenced size parameter in the nanoid(size) function, which can lead to the generation of predictable session tokens, CSRF tokens, API keys, and unique identifiers. This flaw can severely compromise the security of applications relying on nanoid for generating unique identifiers, making them susceptible to session hijacking and other attacks. Developers and organizations utilizing affected versions of nanoid should prioritize upgrading to the patched versions to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corrupt the process-wide CSPRNG poolOffset in fillPool(), which causes subsequent session tokens, CSRF tokens, API keys, and unique identifiers to become the deterministic string "uuuuuuuuuuuuuuuuuuuuu" until the process restarts. This issue is fixed in versions 3.3.12 and 5.1.11.