Debian/node-uuid: high 7.5
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This all
Action: Upgrade node-uuid to 14.0.0+~11.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.0.0+~11.0.0-1 | - |
Fixed versions
| 14.0.0+~11.0.0-1 |
Sources
- osv: DEBIAN-CVE-2026-41907#Debian:14/node-uuid
- https://security-tracker.debian.org/tracker/CVE-2026-41907
published · modified · JSON