Description (CNA)
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| uuidjs / uuid | affected 0 before 14.0.0 |
CWE
CWE-670
References
- https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq
- https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34
ADP enrichment
No English description supplied.