[Snyk] Upgrade nanoid from 3.1.15 to 3.3.8

[GLOBAL-FINTECH]

Snyk has created this PR to upgrade nanoid from 3.1.15 to 3.3.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 27 versions ahead of your current version.

• The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Code Injection SNYK-JS-LODASH-1040724	586	Proof of Concept
	Directory Traversal SNYK-JS-MOMENT-2440688	586	No Known Exploit
	SQL Injection SNYK-JS-SEQUELIZE-2959225	586	No Known Exploit
	Improper Filtering of Special Elements SNYK-JS-SEQUELIZE-3324088	586	No Known Exploit
	Prototype Pollution SNYK-JS-DOTTIE-3332763	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	586	Proof of Concept
	Information Exposure SNYK-JS-SEQUELIZE-3324089	586	No Known Exploit
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-JS-SEQUELIZE-3324090	586	No Known Exploit
	SQL Injection SNYK-JS-SEQUELIZE-2932027	586	Proof of Concept
	Information Exposure SNYK-JS-NANOID-2332193	586	Proof of Concept
	Improper Input Validation SNYK-JS-NANOID-8492085	586	No Known Exploit

Release notes

Package name: nanoid

• 3.3.8 - 2024-11-26
  

  3.3.8

• 3.3.7 - 2023-11-06
• 3.3.6 - 2023-03-26
• 3.3.5 - 2023-03-26
• 3.3.4 - 2022-05-03
• 3.3.3 - 2022-04-18
• 3.3.2 - 2022-03-28
• 3.3.1 - 2022-02-16
• 3.3.0 - 2022-02-14
• 3.2.0 - 2022-01-16
• 3.1.32 - 2022-01-12
• 3.1.31 - 2022-01-11
• 3.1.30 - 2021-10-13
• 3.1.29 - 2021-10-05
• 3.1.28 - 2021-09-26
• 3.1.27 - 2021-09-26
• 3.1.26 - 2021-09-26
• 3.1.25 - 2021-08-12
• 3.1.24 - 2021-08-11
• 3.1.23 - 2021-05-10
• 3.1.22 - 2021-03-15
• 3.1.21 - 2021-03-11
• 3.1.20 - 2020-12-01
• 3.1.19 - 2020-12-01
• 3.1.18 - 2020-11-20
• 3.1.17 - 2020-11-20
• 3.1.16 - 2020-10-26
• 3.1.15 - 2020-10-23

from nanoid GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[openzeppelin-code]

[Snyk] Upgrade nanoid from 3.1.15 to 3.3.8

Generated at commit: cae6d43c7fcb4c8e8cfb32e58df14c2ebe58043c

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	0 0 0 0 0 0
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector