CVE-2026-41988

Katalog CVE

CVSS 2.5 · Low EPSS 0,13%

Kerentanan Always-Incorrect Control Flow Implementation pada uuidjs uuid. Skor CVSS 3.1 2.5 (Low) menurut NVD.

Deskripsi (NVD)

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Rincian

Terbit di NVD

23 April 2026

Terakhir diubah

8 Juli 2026

Status NVD

Analyzed

CVSS 3.1

2.5 (Low), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-670: Always-Incorrect Control Flow Implementation

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq exploit · advisory vendor
• https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 patch