uuidjs uuid

2 known vulnerabilities in uuidjs uuid, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-41907 CVSS 8.1 high uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not…
  • CVE-2026-41988 CVSS 2.5 low uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular…