QwikSec

Security Database

CVE

CWE

Training

CVE-2026-41907

Published: Apr 24, 2026

Modified: Apr 27, 2026

PUBLISHED

Description

uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.

Vendor	Product	Versions
uuidjs	uuid	affected `< 14.0.0`

Weaknesses (CWE)

References

https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.