All the vulnerabilities related to the version 0.1.13 of the package
Insecure Entropy Source - Math.random() in node-uuid
Affected versions of node-uuid
consistently fall back to using Math.random
as an entropy source instead of crypto
, which may result in guessable UUID's.
Update to version 1.4.4 or later.