p PatchFirst

CVE-2026-41988

CVE-2026-41988

This page contains facts from public vulnerability sources. Check the original advisory before updating.

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

CVSS 3.2 · Low · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • uuid

    Versions
    • ≥ 0, < 14.0.0: Affected (semver)

    Update to 14.0.0

  • node-uuid Debian:12

    Versions
    • 14.0.0+~11.0.0-1
    • 14.0.1-1
    • 14.0.2-1
    • 14.0.3-1
    • 14.0.3-2
    • 8.3.2+~8.3.3-3
    • 8.3.2+~8.3.3-4
    • 8.3.2+~8.3.4-1
    • 8.3.2+~8.3.4-2
    • 8.3.2+~8.3.4-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Debian:13

    Versions
    • 14.0.0+~11.0.0-1
    • 14.0.1-1
    • 14.0.2-1
    • 14.0.3-1
    • 14.0.3-2
    • 8.3.2+~8.3.4-1
    • 8.3.2+~8.3.4-2
    • 8.3.2+~8.3.4-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Debian:14

    Versions
    • 8.3.2+~8.3.4-1
    • 8.3.2+~8.3.4-2
    • 8.3.2+~8.3.4-3
    Affected ranges
    • ECOSYSTEM: < 14.0.0+~11.0.0-1

    Update to 14.0.0+~11.0.0-1

  • node-uuid Ubuntu:14.04:LTS

    Versions
    • 1.3.3-2
    • 1.4.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:16.04:LTS

    Versions
    • 1.4.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:18.04:LTS

    Versions
    • 1.4.0-1
    • 1.4.7-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:20.04:LTS

    Versions
    • 3.3.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:22.04:LTS

    Versions
    • 8.3.2+~8.3.0-4
    • 8.3.2+~8.3.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:24.04:LTS

    Versions
    • 8.3.2+~8.3.3-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:25.10

    Versions
    • 8.3.2+~8.3.4-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:26.10

    Versions
    • 8.3.2+~8.3.4-3
    • 14.0.0+~11.0.0-1
    • 14.0.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-uuid Ubuntu:26.04:LTS

    Versions
    • 8.3.2+~8.3.4-1
    • 8.3.2+~8.3.4-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →