Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Upgrading uuid from 11.1.1 to 14.0.3

9 releases in betweennotes for 6

7+
changes to make
0
advisories fixed
2+
new
6+
fixes

Counted from 6 of 9 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking14.0.0
  • breaking14.0.0
  • breaking14.0.0
  • breaking13.0.0
  • breaking12.0.0
  • breaking12.0.0
  • breaking12.0.0

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

    14.0.0

Release by release

  1. 14.0.3

    10 Oct 20261 fix

  2. 14.0.2

    18 Aug 20263 fixes
    • fixed

      v1: carry nsecs overflow into the timestamp's high bits

    • fixed

      v1: set the multicast bit on v1Bytes's own randomly-generated node

    • fixed

      v7: align default seq formula in v7Bytes with updateV7State

  3. 14.0.1

    20 Jun 20261 new
    • new

      Add types condition to node export for moduleResolution bundler

  4. 12.0.1 – 14.0.05 releases, nothing new or fixed; 3 without a note

  5. 12.0.0

    5 Sep 20251 new · 2 fixes
    • new

      Add node@24 to ci matrix

    • fixed

      Improve v4() performance

    • fixed

      Restore node: prefix