Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Your version

14.0.0

major19 Apr 2026Where it was published

14.0.3 is the newest release of 14.x.

In short

3 breaking1 security

  • breaking

    crypto is now expected to be globally defined (requires node@20+)

  • breaking

    Drop node@18 support

  • breaking

    Upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

  • security

    Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

Release note

Security

  • security

    Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

Breaking changes

  • breaking

    crypto is now expected to be globally defined (requires node@20+)

  • breaking

    Drop node@18 support

  • breaking

    Upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years