Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Upgrading uuid from 13.0.0 to 14.0.3

6 releases in betweennotes for 4

Other targets from 13.0.0Newest 13.x13.0.2Clears its advisory13.0.1
3+
changes to make
1
advisory fixed
1+
new
4+
fixes

Counted from 4 of 6 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking14.0.0
  • breaking14.0.0
  • breaking14.0.0

Security

Fixes 1 advisory affecting 13.0.0

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

    14.0.0

Release by release

  1. 14.0.3

    10 Oct 20261 fix

  2. 14.0.2

    18 Aug 20263 fixes
    • fixed

      v1: carry nsecs overflow into the timestamp's high bits

    • fixed

      v1: set the multicast bit on v1Bytes's own randomly-generated node

    • fixed

      v7: align default seq formula in v7Bytes with updateV7State

  3. 14.0.1

    20 Jun 20261 new
    • new

      Add types condition to node export for moduleResolution bundler

  4. 13.0.1 – 14.0.03 releases, nothing new or fixed; 2 without a note