TI-2026-30309 CVE-2026-41907 · GHSA-w5hq-g745-h8pq
uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided
Priority HIGH 76
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs.
No uuidjs vulnerabilities are listed in CISA KEV.
2 records
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs.
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.