Package
gitlab-rails-ce-19.4
Component
uuid
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
uuid 10.0.0 is a transitive dependency of @snowplow/browser-tracker-core and @snowplow/tracker-core 4.6.8, and GitLab itself declares uuid 8.1.0 as a direct dependency (unchanged on upstream master); both are bundled into GitLab's frontend assets (srv/gitlab/yarn.lock). The only fixed releases are uuid 11.1.1 and later, whose browser build uses optional-chaining syntax that GitLab's webpack 4 asset pipeline cannot parse, so forcing them fails the asset compile. Resolution requires upstream GitLab to move the asset pipeline off webpack 4 or upgrade uuid, or snowplow to ship a build compatible with it.
Status