CVE-2026-67214Published
nanoid Infinite Loop via Negative Size in non-secure module
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-67214 · Microsoft / collected KEV context
cve-program · CVE-2026-67214
- https://github.com/ai/nanoid/releases/tag/5.1.16
- https://github.com/ai/nanoid/releases/tag/3.3.16
- https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49
- https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module
nvd · CVE-2026-67214
- https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49
- https://github.com/ai/nanoid/releases/tag/3.3.16
- https://github.com/ai/nanoid/releases/tag/5.1.16
- https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module
osv · GHSA-28wg-ghj8-5hjv
- https://nvd.nist.gov/vuln/detail/CVE-2026-67214
- https://github.com/ai/nanoid/pull/600
- https://github.com/ai/nanoid/pull/601
- https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49
- https://github.com/ai/nanoid/commit/e835c9b71eab832bc6106944bdd26ea96cf2c66d
- https://github.com/ai/nanoid
- https://github.com/ai/nanoid/releases/tag/5.1.16
- https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module
Related operational evidence
Explicit CVE identifiers- Jira Software Data Center and Server: DoS (Denial of Service) nanoid Dependency (CVE-2026-67214) · Security advisory · 15 Sep 2026