CVE-2024-55565

Predictable results in nanoid generation when given non-integer values

4.3 MediumFix available

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

0.66%Up 0.6 points since Dec 10, 2024

What each source reports

CVE List Score used 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-835
Updated: 2026-11-02

EUVDEUVD-2024-3491 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: EUVD-2024-3491
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mwcw-c2x4-8c55 4.3

Predictable results in nanoid generation when given non-integer values

When nanoid is called with a fractional value, there were a number of undesirable effects:

in browser and non-secure, the code infinite loops on while (size--)
in node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled
if the first call in node is a fractional argument, the initial buffer allocation fails with an error

Version 3.3.8 and 5.0.9 are fixed.

Record: GHSA-mwcw-c2x4-8c55
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-835
Updated: 2026-11-02

NVD 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-835
Updated: 2026-11-02

OSV 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-55565 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: DEBIAN-CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

Show 9 moreShow less

OSVGHSA-mwcw-c2x4-8c55 4.3

Predictable results in nanoid generation when given non-integer values

When nanoid is called with a fractional value, there were a number of undesirable effects:

in browser and non-secure, the code infinite loops on while (size--)
in node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled
if the first call in node is a fractional argument, the initial buffer allocation fails with an error

Version 3.3.8 and 5.0.9 are fixed.

Record: GHSA-mwcw-c2x4-8c55
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-835
Updated: 2026-11-02

OSVRHSA-2025:0340 9.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record: RHSA-2025:0340
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:2769 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates

Record: RHSA-2026:2769
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-APP-NPM-CVE-2024-55565 4.3

CVE-2024-55565 in nanoid - Patched by Root

Root has patched CVE-2024-55565 in the nanoid package for Root:npm. Multiple fixed versions available.

Record: ROOT-APP-NPM-CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-55565 4.3

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

Record: UBUNTU-CVE-2024-55565
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVCLSA-2026-1790609840 No score

TuxCare security update for nanoid (4 CVEs)

TuxCare rebuilt nanoid to address 4 CVEs. Fixed in 3.3.7-tuxcare.2.

Record: CLSA-2026-1790609840
Updated: 2026-11-02

OSVCLSA-2026-1790707108 No score

TuxCare security update for nanoid (1 CVE)

TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.6-tuxcare.1.

Record: CLSA-2026-1790707108
Updated: 2026-11-02

OSVCLSA-2026-1790712460 No score

TuxCare security update for nanoid (1 CVE)

TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.4-tuxcare.1.

Record: CLSA-2026-1790712460
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14663-1 No score

velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media

These are all security issues fixed in the velociraptor-0.7.0.4.git142.862ef23-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14663-1
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`nanoid` npm	4.0.0 up to 5.0.9	5.0.9
`nanoid` npm	before 3.3.8	3.3.8
`nanoid` TuxCare:npm From an advisory covering 4 CVEs	3.3.7-tuxcare.0 up to 3.3.7-tuxcare.2, plus listed versions 3.3.73.3.7-tuxcare.1	3.3.7-tuxcare.2
`nanoid` TuxCare:npm	3.3.6-tuxcare.0 up to 3.3.6-tuxcare.1, plus listed versions 3.3.6	3.3.6-tuxcare.1
`nanoid` TuxCare:npm	3.3.4-tuxcare.0 up to 3.3.4-tuxcare.1, plus listed versions 3.3.4	3.3.4-tuxcare.1
`node-mocha` Debian:12	before 9.1.4+ds1+~cs28.2.8-1	9.1.4+ds1+~cs28.2.8-1
`node-mocha` Debian:13	before 9.1.4+ds1+~cs28.2.8-1	9.1.4+ds1+~cs28.2.8-1
`node-mocha` Debian:14	before 9.1.4+ds1+~cs28.2.8-1	9.1.4+ds1+~cs28.2.8-1
`node-postcss` Debian:12	before 8.4.20+~cs8.0.23-1+deb12u1, plus listed versions 8.4.20+~cs8.0.23-1	8.4.20+~cs8.0.23-1+deb12u1
`node-postcss` Debian:13	before 8.4.49+~cs9.2.32-1	8.4.49+~cs9.2.32-1

Show 129 moreShow less

Affected packages
Package	Affected	Fixed
`node-postcss` Debian:14	before 8.4.49+~cs9.2.32-1	8.4.49+~cs9.2.32-1
`node-postcss` Debian:11 From an advisory covering 3 CVEs	before 8.2.1+~cs5.3.23-8+deb11u1, plus listed versions 8.2.1+~cs5.3.23-8	8.2.1+~cs5.3.23-8+deb11u1
`node-mocha` Debian:11 From an advisory covering 2 CVEs	before 8.2.1+ds1+~cs29.4.27-3+deb11u1, plus listed versions 8.2.1+ds1+~cs29.4.27-3	8.2.1+ds1+~cs29.4.27-3+deb11u1
`automation-controller-venv-tower` Red Hat:ansible_automation_platform:2.5::el8 From an advisory covering 5 CVEs	before 0:4.6.6-1.el8ap	0:4.6.6-1.el8ap
`automation-controller-venv-tower` Red Hat:ansible_automation_platform:2.5::el9 From an advisory covering 5 CVEs	before 0:4.6.6-1.el9ap	0:4.6.6-1.el9ap
`python3.11-aiohttp` Red Hat:ansible_automation_platform:2.5::el8 From an advisory covering 5 CVEs	before 0:3.10.11-1.el8ap	0:3.10.11-1.el8ap
`python3.11-aiohttp-debuginfo` Red Hat:ansible_automation_platform:2.5::el8 From an advisory covering 5 CVEs	before 0:3.10.11-1.el8ap	0:3.10.11-1.el8ap
`python3.11-aiohttp-debugsource` Red Hat:ansible_automation_platform:2.5::el8 From an advisory covering 5 CVEs	before 0:3.10.11-1.el8ap	0:3.10.11-1.el8ap
`python3.11-aiohttp` Red Hat:ansible_automation_platform:2.5::el9 From an advisory covering 5 CVEs	before 0:3.10.11-1.el9ap	0:3.10.11-1.el9ap
`python3.11-aiohttp-debuginfo` Red Hat:ansible_automation_platform:2.5::el9 From an advisory covering 5 CVEs	before 0:3.10.11-1.el9ap	0:3.10.11-1.el9ap
`python3.11-aiohttp-debugsource` Red Hat:ansible_automation_platform:2.5::el9 From an advisory covering 5 CVEs	before 0:3.10.11-1.el9ap	0:3.10.11-1.el9ap
`automation-gateway-server` Red Hat:ansible_automation_platform:2.5::el8 From an advisory covering 5 CVEs	before 0:2.5.20250115-1.el8ap	0:2.5.20250115-1.el8ap
`automation-gateway-server` Red Hat:ansible_automation_platform:2.5::el9 From an advisory covering 5 CVEs	before 0:2.5.20250115-1.el9ap	0:2.5.20250115-1.el9ap
`ceph` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-base` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-base-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-common` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-common-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-debugsource` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-exporter-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-fuse` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-fuse-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-immutable-object-cache` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-immutable-object-cache-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-mds-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-mgr-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-mib` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-mon-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-osd-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-radosgw-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-resource-agents` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-selinux` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph-test-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`cephfs-mirror-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`cephfs-top` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libcephfs-devel` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libcephfs2` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libcephfs2-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libcephsqlite-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librados-devel` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librados-devel-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librados2` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librados2-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libradospp-devel` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libradosstriper1` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`libradosstriper1-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librbd-devel` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librbd1` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librbd1-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librgw-devel` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librgw2` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`librgw2-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-ceph-argparse` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-ceph-common` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-cephfs` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-cephfs-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rados` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rados-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rbd` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rbd-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rgw` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`python3-rgw-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`rbd-fuse-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`rbd-mirror-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`rbd-nbd` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`rbd-nbd-debuginfo` Red Hat:ceph_storage:7.1::el8 From an advisory covering 11 CVEs	before 2:18.2.1-381.el8cp	2:18.2.1-381.el8cp
`ceph` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-base` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-base-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-common` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-common-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-debugsource` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-exporter-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-fuse` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-fuse-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-immutable-object-cache` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-immutable-object-cache-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-mds-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-mgr-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-mib` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-mon-client-nvmeof-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-mon-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-osd-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-radosgw-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-resource-agents` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-selinux` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`ceph-test-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`cephadm` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`cephfs-mirror-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`cephfs-top` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libcephfs-devel` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libcephfs2` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libcephfs2-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libcephsqlite-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librados-devel` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librados-devel-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librados2` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librados2-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libradospp-devel` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libradosstriper1` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`libradosstriper1-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librbd-devel` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librbd1` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librbd1-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librgw-devel` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librgw2` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`librgw2-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-ceph-argparse` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-ceph-common` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-cephfs` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-cephfs-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rados` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rados-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rbd` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rbd-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rgw` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`python3-rgw-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`rbd-fuse-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`rbd-mirror-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`rbd-nbd` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`rbd-nbd-debuginfo` Red Hat:ceph_storage:7.1::el9 From an advisory covering 11 CVEs	before 2:18.2.1-381.el9cp	2:18.2.1-381.el9cp
`nanoid` Root:npm	before 3.3.6-aikido.2	3.3.6-aikido.23.3.8-aikido.23.3.8-aikido.1
`@rootio/nanoid` Root:npm	before 3.3.6-root.io.1	3.3.6-root.io.13.3.6-root.io.23.3.8-root.io.23.3.8-root.io.1
`node-postcss` Ubuntu:20.04:LTS	All versions, plus listed versions 6.0.23-16.0.23-3	None known
`node-postcss` Ubuntu:22.04:LTS	All versions, plus listed versions 8.2.1+~cs5.3.23-88.4.5+~cs7.1.51-28.4.6+~cs7.3.21-1	None known
`node-postcss` Ubuntu:24.04:LTS	All versions, plus listed versions 8.4.20+~cs8.0.23-18.4.31+~cs8.0.26-1	None known
`velociraptor` openSUSE:Tumbleweed From an advisory covering 27 CVEs	before 0.7.0.4.git142.862ef23-1.1	0.7.0.4.git142.862ef23-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-55565 is a medium vulnerability (CVSS 4.3) in nanoid, published December 9, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 52nd percentile. Fixed in nanoid 5.0.9.

References

Show 142 moreShow less