VDB

RHSA-2026:59030

RHSA-2026:59030 PUBLISHED CVSS 9.100000381469727 CRITICAL

A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatgrafana13-2-main@src as a component of Red Hat Hardened Images*
Red Hatgrafana13-2-main@x86_64 as a component of Red Hat Hardened Images*
Red Hatgrafana13-2-main@aarch64 as a component of Red Hat Hardened Images*

Timeline

  • Aug 24, 2026 CVE Published
  • Aug 28, 2026 CVE Updated
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Security Advisory
  • Aug 28, 2026 Security Advisory
  • Aug 28, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›