uuid - npm Package Compare versions

Comparing version 13.0.0 to 13.0.1

dist-node/v35.js

@@ -30,2 +30,5 @@ import parse from './parse.js';
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
@@ -32,0 +35,0 @@ buf[offset + i] = bytes[i];

dist-node/v6.js

@@ -10,2 +10,5 @@ import { unsafeStringify } from './stringify.js';
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
@@ -12,0 +15,0 @@ buf[offset + i] = bytes[i];

dist/v35.js

@@ -30,2 +30,5 @@ import parse from './parse.js';
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
@@ -32,0 +35,0 @@ buf[offset + i] = bytes[i];

dist/v6.js

@@ -10,2 +10,5 @@ import { unsafeStringify } from './stringify.js';
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
@@ -12,0 +15,0 @@ buf[offset + i] = bytes[i];

package.json

 {
   "name": "uuid",
-  "version": "13.0.0",
+  "version": "13.0.1",
   "description": "RFC9562 UUIDs",
@@ -5,0 +5,0 @@ "type": "module",

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Improved metrics

Total package byte prevSize

67344

1%

Lines of code

1216

1%

Number of medium supply chain risk alerts

0

-100%

No dependency changes