Packages

uuid

14.0.3 · 10 Oct 2026MIT260.8M / weekRepositoryHomepagenpmAtom feed

Upgrading uuid from 13.0.2 to 14.0.3

4 releases in betweenevery note read

3
changes to make
0
advisories fixed
1
new
4
fixes

Before you upgrade

Tick each one off as you go
  • breaking14.0.0
  • breaking14.0.0
  • breaking14.0.0

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

    14.0.0

Release by release

  1. 14.0.3

    10 Oct 20261 fix

  2. 14.0.2

    18 Aug 20263 fixes
    • fixed

      v1: carry nsecs overflow into the timestamp's high bits

    • fixed

      v1: set the multicast bit on v1Bytes's own randomly-generated node

    • fixed

      v7: align default seq formula in v7Bytes with updateV7State

  3. 14.0.1

    20 Jun 20261 new
    • new

      Add types condition to node export for moduleResolution bundler

  4. 14.0.0nothing new or fixed in the note