CVEvulnerability

CVE-2026-41988

2.5 LOW Published 2026-04-23 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-04-23
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.2 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS 3.1 ([email protected])
2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-670

Description

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Affected configurations

• uuidjs uuid (< 11.1.1) • uuidjs uuid 12.0.0 • uuidjs uuid 13.0.0

Related

Weakness · CWE (1)

  • CWE-670 Always-Incorrect Control Flow Implementation weakness

References