8.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-41907

CVE-2026-41907: uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided

uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-41907

CVE-2026-41907:

8.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
uuid	npm	>= 11.0.0, < 11.1.1	11.1.1
uuid	npm	>= 12.0.0, < 12.0.1	12.0.1
uuid	npm	>= 13.0.0, < 13.0.1	13.0.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the uuid library's v3, v5, and v6 functions, which are used to generate UUIDs. The issue, as detailed in the security advisory and confirmed by the patch, is a missing bounds check when these functions are provided with an external buffer to write the UUID into. Specifically, the v35 function (which underpins both v3 and v5) and the v6 function did not validate if the provided buffer and offset would result in writing beyond the buffer's allocated memory. This could lead to silent partial writes, where an application might unknowingly operate on incomplete or truncated UUIDs, potentially causing data corruption or other logic flaws. The provided patch addresses this by adding an explicit RangeError check, similar to what was already present in other functions like v4, ensuring that any out-of-bounds write attempts are prevented.

Vulnerable functions

v35

src/v35.ts

The function `v35`, which is used by `v3` and `v5`, was missing a bounds check before writing to the provided buffer `buf`. This could lead to an out-of-bounds write if the buffer is too small or the offset is too large, resulting in a silent partial write.

v6

src/v6.ts

The function `v6` was missing a bounds check before writing to the provided buffer `buf`. This could lead to an out-of-bounds write if the buffer is too small or the offset is too large, resulting in a silent partial write.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.