uuid
14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed
Upgrading uuid from 11.1.0 to 14.0.3
10 releases in betweennotes for 6
Counted from 6 of 10 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking14.0.0
- breaking14.0.0
- breaking14.0.0
- breaking13.0.0
- breaking12.0.0
- breaking12.0.0
- breaking12.0.0
Security
Fixes 1 advisory affecting 11.1.0
- uuid: Missing buffer bounds check in v3/v5/v6 when buf is providedmoderate · GHSA-w5hq-g745-h8pq
- 14.0.0
Fixes GHSA-w5hq-g745-h8pq:
v3(),v5(), andv6()did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalidoffsetwas provided. ARangeErroris now thrown ifoffset < 0oroffset + 16 > buf.length.
Release by release
- fixed
v1: carry nsecs overflow into the timestamp's high bits
- fixed
v1: set the multicast bit on v1Bytes's own randomly-generated node
- fixed
v7: align default seq formula in v7Bytes with updateV7State
- fixed
- new
Add types condition to node export for moduleResolution bundler
- new
12.0.1 – 14.0.05 releases, nothing new or fixed; 3 without a note
- new
Add node@24 to ci matrix
- fixed
Improve v4() performance
- fixed
Restore node: prefix
- new
11.1.1no release note