From 380b6f640e641f7a306c7a4b4ae1909c94e604ae Mon Sep 17 00:00:00 2001 From: Alvaro Vega Date: Thu, 23 Apr 2026 10:36:48 +0200 Subject: [PATCH 1/2] Update uuid dependency to version 14.0.0 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index fb7162e81..1d057bef4 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "query-string": "7.1.1", "revalidator": "~0.3.1", "underscore": "~1.13.4", - "uuid": "~8.3.2" + "uuid": "~14.0.0" }, "devDependencies": { "async-mqtt": "~2.6.3", From 99c4a52f29592411ea62fec3b42b867e4029e9a6 Mon Sep 17 00:00:00 2001 From: Alvaro Vega Date: Thu, 23 Apr 2026 10:37:10 +0200 Subject: [PATCH 2/2] Upgrade uuid dependency to version 14.0.0 --- CHANGES_NEXT_RELEASE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE index 8b1378917..e927e4737 100644 --- a/CHANGES_NEXT_RELEASE +++ b/CHANGES_NEXT_RELEASE @@ -1 +1 @@ - +- Upgrade uuid dep from 8.3.2 to 14.0.0 due to CWE-787 CWE-1285