PT-2026-73864

TuxCare rebuilt node-uuid to address 1 CVE. Fixed in 1.4.3-tuxcare.1...

47pages-keystone (>=0.0.1, <=0.0.5), @fathym-it/fathym-forecast (>=0.0.1, <=0.6.5) +163 more potentially affected by unknown CVE via node-uuid (>=1.1.0, <=1.3.1)

node-uuid NPM version =1.1.0, =0.0.1, =0.0.1, =0.3.21-3, =0.3.1-integration, =1.0.2, =0.6.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.6.9-zumo, =0.10.6 and more Source cves: unknown CVE Source advisory: MEND:WS-2016-0089...

WS-2016-0089

Node-uuid is vulnerable to Denial of Service DoS attacks via infinite loop bug in uuid.js parse method...

EUVD-2020-0358

Malware in sbrugna...

0.8.18-p11 (0.8.18-p12), 08cms (1.0.0) +2098 more potentially affected by CVE-2015-8851 via node-uuid (>=1.1.0, <=1.4.3)

node-uuid NPM version =1.1.0, =0.0.1, =0.0.1-alpha, =0.0.1, =0.0.1, =0.11.3-alpha.1660, =0.0.2, =0.0.7, =0.0.7, =1.0.14, =1.0.18 and more Source cves: CVE-2015-8851 Source advisory: OSV:GHSA-265Q-28RP-CHQ5...

GHSA-265Q-28RP-CHQ5 Insecure Entropy Source - Math.random() in node-uuid

Affected versions of node-uuid consistently fall back to using Math.random as an entropy source instead of crypto, which may result in guessable UUID's. Recommendation Update to version 1.4.4 or later...

Insecure Entropy Source - Math.random() in node-uuid

Affected versions of node-uuid consistently fall back to using Math.random as an entropy source instead of crypto, which may result in guessable UUID's. Recommendation Update to version 1.4.4 or later...

0.8.18-p11 (0.8.18-p12), 08cms (1.0.0) +2098 more potentially affected by CVE-2015-8851 via node-uuid (>=1.1.0, <=1.4.3)

node-uuid NPM version =1.1.0, =0.0.1, =0.0.1-alpha, =0.0.1, =0.0.1, =0.11.3-alpha.1660, =0.0.2, =0.0.7, =0.0.7, =1.0.14, =1.0.18 and more Source cves: CVE-2015-8851 Source advisory: GHSA-265Q-28RP-CHQ5...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

DEBIAN-CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

Design/Logic Flaw

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

UBUNTU-CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2015-8851

CVE-2015-8851 affects node-uuid before 1.4.4. The root cause is insufficient randomness in GUID generation (use of Math.random instead of a cryptographically secure source), which could enable attackers to guess GUIDs with unspecified impact. Affected: node-uuid (pre-1.4.4). Impact and exploitabi...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

0.8.18-p11 (0.8.18-p12), 08cms (1.0.0) +2098 more potentially affected by CVE-2015-8851 via node-uuid (>=1.1.0, <=1.4.3)

node-uuid NPM version =1.1.0, =0.0.1, =0.0.1-alpha, =0.0.1, =0.0.1, =0.11.3-alpha.1660, =0.0.2, =0.0.7, =0.0.7, =1.0.14, =1.0.18 and more Source cves: CVE-2015-8851 Source advisory: MEND:CVE-2015-8851...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...