p PatchFirst

PatchFirst · Latest vulnerabilities

uuid vulnerabilities

Vulnerabilities published for uuid in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-41907

    High · CVSS 8.1EPSS 0.35%Fix available

    uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided

    uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.

    uuid uuid uuidNode.js
    • Update to 11.1.1
    • Update to 12.0.1
    • Update to 13.0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →