Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Upgrading uuid from 1.4.2 to 14.0.3

43 releases in betweennotes for 15

Other targets from 1.4.2Clears its advisory11.1.1
9.0.0, 7.0.0, 3.0.0, 2.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
15+
changes to make
1
advisory fixed
10+
new
16+
fixes

Counted from 15 of 43 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking14.0.0
  • breaking14.0.0
  • breaking14.0.0
  • breaking13.0.0
  • breaking12.0.0
  • breaking12.0.0
  • breaking12.0.0
  • breaking11.0.0
  • breaking11.0.0
  • breaking11.0.0

Security

Fixes 1 advisory affecting 1.4.2

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

    14.0.0

Release by release

  1. 14.0.3

    10 Oct 20261 fix

  2. 14.0.2

    18 Aug 20263 fixes
    • fixed

      v1: carry nsecs overflow into the timestamp's high bits

    • fixed

      v1: set the multicast bit on v1Bytes's own randomly-generated node

    • fixed

      v7: align default seq formula in v7Bytes with updateV7State

  3. 14.0.1

    20 Jun 20261 new
    • new

      Add types condition to node export for moduleResolution bundler

  4. 12.0.1 – 14.0.05 releases, nothing new or fixed; 3 without a note

  5. 12.0.0

    5 Sep 20251 new · 2 fixes
    • new

      Add node@24 to ci matrix

    • fixed

      Improve v4() performance

    • fixed

      Restore node: prefix

  6. 11.1.1no release note

  7. 11.1.0

    19 Feb 20251 new
    • new

      Update TS types to allowUint8Array subtypes for buffer option

  8. 11.0.5nothing new or fixed in the note

2 other lines we could not sort, mostly version bumps

  • Revert "simplify type for v3 and v5"

    11.0.3

  • Revert "perf: remove superfluous call to toLowerCase (#677)"

    10.0.0

2 internal lines (docs, tests, tooling) left out.