EUVD-2021-2147

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

RSA PEM key generator has serious flaws in random number generation leading to identical keys.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-41117	11 Oct 202120:24	–	circl
CNNVD	Keypair 代码问题漏洞	11 Oct 202100:00	–	cnnvd
CVE	CVE-2021-41117	11 Oct 202117:10	–	cve
Cvelist	CVE-2021-41117 Insecure random number generation	11 Oct 202117:10	–	cvelist
Github Security Blog	Insecure random number generation in keypair	11 Oct 202117:09	–	github
NVD	CVE-2021-41117	11 Oct 202117:15	–	nvd
OSV	GHSA-3F99-HVG4-QJWJ Insecure random number generation in keypair	11 Oct 202117:09	–	osv
Prion	Path traversal	11 Oct 202117:15	–	prion
RedhatCVE	CVE-2021-41117	9 Jan 202608:54	–	redhatcve
The Hacker News	GitHub Revoked Insecure SSH Keys Generated by a Popular git Client	12 Oct 202107:57	–	thn

[
  {
    "enisaIdVendor": [
      {
        "id": "2f9cb4db-be48-3859-bfbd-e21d9204a087",
        "vendor": {
          "name": "juliangruber"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "15c20cfd-caad-3cf4-8bd8-9805da8305ec",
        "product": {
          "name": "keypair"
        },
        "product_version": "≤ 1.0.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/juliangruber/keypair/security/advisories/GHSA-3f99-hvg4-qjwj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41117
github	www.github.com/juliangruber/keypair/commit/9596418d3363d3e757676c0b6a8f2d35a9d1cb18
github	www.github.com/juliangruber/keypair
github	www.github.com/juliangruber/keypair/releases/tag/v1.0.4
securitylab	www.securitylab.github.com/advisories/GHSL-2021-1012-keypair
securitylab	www.securitylab.github.com/advisories/GHSL-2021-1012-keypair/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.7 - 9.1

CVSS 26.4

EPSS0.00436