CVE-2026-41988

תיאור (מקור, אנגלית)

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

מדדים

CVSS 3.1

2.5 (LOW) מקור הציון: NVD CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-29/7/2026

CWE

CWE-670

מוצרים מושפעים

uuidjs: uuid

קישורים

• https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq ExploitVendor Advisory
• https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq ExploitVendor Advisory
• https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 Patch