GHSA-qmq6-f8pr-cx5x
Low · 3.2CVSS
3.2
EPSS
—
Published
Apr 23, 2026
CISA due date
—
The record
Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | uuid | 0 | 14.0.0 |
Related vulnerabilities
- CVE-2026-41907 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Also affects uuid
- GHSA-w5hq-g745-h8pq uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided Also affects uuid
- CVE-2026-106586 In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to… CWE-670
- CVE-2026-98164 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check… CWE-670
- CVE-2026-98051 In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix… CWE-670
- CVE-2026-55624 MintyItanium Lost-Auction is an auction plugin for Minecraft. CWE-670
- CVE-2026-19487 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results… CWE-670
- CVE-2026-73283 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to… CWE-670