uuidjs uuid
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41907 | < 14.0.0 | uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided | HIGH 8.1 | 0.4 % | ||
| CVE-2026-41988 | < 14.0.0 | uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID | LOW 3.2 | 0.2 % |