Skip to content

Out of date UUID dependency #92

Description

@jaydee-li

I get the following error from my console

uuid <11.1.1

Severity: moderate

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - GHSA-w5hq-g745-h8pq

No fix available

node_modules/uuid

ordered-uuid *

Depends on vulnerable versions of uuid

node_modules/ordered-uuid

localbase  *

Depends on vulnerable versions of ordered-uuid

node_modules/localbase

4 vulnerabilities (1 low, 3 moderate)

I can overcome the issue by forcing an override in the package.json file

"overrides": {
"uuid": "^11.1.1"
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions