CVE-2026-41988_CVE-2026-41988

3.2 / 10

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Description

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Basic Information

ID CVE-2026-41988

Source mitre

Published Apr 23, 2026 at 04:00

Modified Apr 23, 2026 at 05:10

Affected Product

Vendor uuidjs

Product uuid

Affected Versions uuidjs uuid 0

CWE Classification

CWE-670

References

{
    "lastseen": "",
    "description": "uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.",
    "published": "2026-04-23T04:00:54.960Z",
    "modified": "2026-04-23T05:10:10.422Z",
    "type": "cve",
    "title": "CVE-2026-41988",
    "source": "mitre",
    "references": "https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\nhttps://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34",
    "id": "CVE-2026-41988",
    "bulletinFamily": "",
    "cwe": [
        "CWE-670"
    ],
    "cvelist": null,
    "sourceData": "uuidjs uuid 0",
    "sourceHref": "",
    "cvss": {
        "score": 3.2,
        "severity": "LOW",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "uuid",
    "version": "0",
    "vendor": "uuidjs",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}