Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-41988
3.2
LOWCVSS v3
Published
April 23, 2026
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.
NPM
uuidjs/uuid
GitHubGenerate RFC-compliant UUIDs in JavaScript
GitHubGenerate RFC-compliant UUIDs in JavaScript< 11.1.1, >= 12.0.0, < 12.0.1, >= 13.0.0, < 13.0.1NVD