nanoid (aka Nano ID) before 5
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.
Exploitability
AV:N
AC:L
PR:L
UI:N
Scope
S:U
Impact
C:N
I:L
A:N
4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N