Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Upgrading uuid from 11.0.2 to 14.0.3

14 releases in betweennotes for 10

Other targets from 11.0.2Newest 11.x, Clears its advisory11.1.1
7+
changes to make
1
advisory fixed
3+
new
11+
fixes

Counted from 10 of 14 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking14.0.0
  • breaking14.0.0
  • breaking14.0.0
  • breaking13.0.0
  • breaking12.0.0
  • breaking12.0.0
  • breaking12.0.0

Security

Fixes 1 advisory affecting 11.0.2

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

    14.0.0

Release by release

  1. 14.0.3

    10 Oct 20261 fix

  2. 14.0.2

    18 Aug 20263 fixes
    • fixed

      v1: carry nsecs overflow into the timestamp's high bits

    • fixed

      v1: set the multicast bit on v1Bytes's own randomly-generated node

    • fixed

      v7: align default seq formula in v7Bytes with updateV7State

  3. 14.0.1

    20 Jun 20261 new
    • new

      Add types condition to node export for moduleResolution bundler

  4. 12.0.1 – 14.0.05 releases, nothing new or fixed; 3 without a note

  5. 12.0.0

    5 Sep 20251 new · 2 fixes
    • new

      Add node@24 to ci matrix

    • fixed

      Improve v4() performance

    • fixed

      Restore node: prefix

  6. 11.1.1no release note

  7. 11.1.0

    19 Feb 20251 new
    • new

      Update TS types to allowUint8Array subtypes for buffer option

  8. 11.0.5nothing new or fixed in the note

1 other line we could not sort, mostly version bumps

  • Revert "simplify type for v3 and v5"

    11.0.3

2 internal lines (docs, tests, tooling) left out.