nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that passes an unvalidated, attacker-controlled size of 0 to these functions is exposed to a denial-of-service condition.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions.
    When these functions are configured with a size of 0, the internal generation loop never satisfies its
    exit condition and spins indefinitely, hanging the calling thread. An application that passes an
    unvalidated, attacker-controlled size of 0 to these functions is exposed to a denial-of-service condition.
    (CVE-2026-67213)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions.
    When these functions are configured with a size of 0, the internal generation loop never satisfies its     exit condition and spins indefinitely, hanging the calling thread. An application that passes an     unvalidated, attacker-controlled size of 0 to these functions is exposed to a denial-of-service condition.
    (CVE-2026-67213)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
445948	SCA: security update for nanoid (GHSA-2v37-7h3g-55p8)	Tenable Cloud Security	SCA Checks	Local	high
445948	SCA: security update for nanoid (GHSA-2v37-7h3g-55p8)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
330739	Linux Distros Unpatched Vulnerability : CVE-2026-67213	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-67213

high

Tenable Plugins

high

high

high