PT-2026-34639 · Uuidjs · Uuid

Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-41988

NVD

CVSS v3.1

3.2

Low

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Fix

Weakness Enumeration

CWE-670

Related Identifiers

CVE-2026-41988

Affected Products

Uuid

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-41988 · Security Note
• https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 · Note
• https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq · Note