You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This package is using a version of the UUID package that is end of life. v10 of the uuid package is no longer supported - for example only v11+ received an update for GHSA-w5hq-g745-h8pq
I don't think this vulnerability affects this package, but if there were further vulnerabilities, v10 would likely not receive updates
Solution:
Increase the major version of UUID or remove this package - I believe some repos have replaced the uuid package with a native crypto implementation - I've not looked at whether this would work here or not
Activity
dreamorosi commentedon Jul 8, 2026
We're also affected by this as transitive dependency - would appreciate a bump.
lucasmcdonald3 commentedon Jul 24, 2026
Hi @CarlyG55,
Thanks for flagging this. We've bumped the minimum
uuidversion to11.1.1, which you can pick up with v5.0.2.Thanks,
Lucas