GHSA-w5hq-g745-h8pq
High · 7.5CVSS
7.5
EPSS
—
Published
Apr 22, 2026
CISA due date
—
The record
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | uuid | 0 | 11.1.1 |
| npm | uuid | 12.0.0 | 12.0.1 |
Related vulnerabilities
- CVE-2026-41907 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Same vulnerability
- GHSA-qmq6-f8pr-cx5x Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided Also affects uuid
- CVE-2026-107821 MariaDB server is a community developed fork of MySQL server. CWE-1285
- CVE-2026-31912 libpcap BPF interpreter detects neither reaching the end of the filter program buffer due… CWE-1285
- CVE-2026-14479 A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser… CWE-1285
- CVE-2026-18485 There is a local privilege escalation vulnerability recently discovered in the NI-PAL… CWE-1285
- CVE-2026-12681 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in… CWE-1285
- CVE-2026-8036 Improper input validation in NI-PAL may allow a local authenticated user to access… CWE-1285