← back
CVE-2026-41988

CVE-2026-41988

CVSS 3.2 LOWEPSS 0.1%CWE-670
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected products
uuidjs · uuid

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq