From 77c59b99251dda9c997e9b139fed58b7993d7cdc Mon Sep 17 00:00:00 2001 From: Thrishma Bharathi Anandan <118597197+THRISHMA2424@users.noreply.github.com> Date: Fri, 18 Sep 2026 11:44:13 -0400 Subject: [PATCH] fix(middlewareNode): bump uuid 8.3.2 -> 11.1.1 (Issue 4) Deliberately not latest: uuid 14.x drops the CommonJS require export entirely, which would break require("uuid") in this CommonJS codebase at runtime, not just under Jest. 11.1.1 is the lowest release that is both non-vulnerable and still CommonJS-compatible. Verified with a plain node require() as well as the test suite. --- middlewareNode/package-lock.json | 15 +++++++++------ middlewareNode/package.json | 2 +- 2 files changed, 10 insertions(+), 7 deletions(-) diff --git a/middlewareNode/package-lock.json b/middlewareNode/package-lock.json index 160428da..2790542f 100644 --- a/middlewareNode/package-lock.json +++ b/middlewareNode/package-lock.json @@ -36,7 +36,7 @@ "passport": "^0.7.0", "passport-jwt": "^4.0.0", "request-ip": "^3.3.0", - "uuid": "^8.3.2", + "uuid": "^11.1.1", "web-streams-polyfill": "^3.3.3" }, "devDependencies": { @@ -8838,13 +8838,16 @@ } }, "node_modules/uuid": { - "version": "8.3.2", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", - "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", - "deprecated": "uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], "license": "MIT", "bin": { - "uuid": "dist/bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/v8-to-istanbul": { diff --git a/middlewareNode/package.json b/middlewareNode/package.json index 5d01ac6c..435ab6b5 100644 --- a/middlewareNode/package.json +++ b/middlewareNode/package.json @@ -32,7 +32,7 @@ "passport": "^0.7.0", "passport-jwt": "^4.0.0", "request-ip": "^3.3.0", - "uuid": "^8.3.2" + "uuid": "^11.1.1" }, "scripts": { "start": "nodemon src/server.js",