Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/02/09 7:00 p.m.•5 views

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG due to the UUIDv4 and UUID functions silently returning predictable values, such as the zero UUID, when the cryptographic random number generator fails. An attacker can...

9.8CVSS5.6AI score0.005EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/10 2:32 a.m.•24 views

CVE-2025-66565

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.8CVSS6.6AI score0.00468EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/09 1:47 a.m.•18 views

CVE-2025-66565 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.3CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•0 views

CVE-2025-66565: Unchecked Return Value

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•24 views

Fiber Utils 安全特征问题漏洞

Fiber Utils is a general-purpose function library in the Fiber open source. A security feature issue vulnerability exists in Fiber Utils 2.0.0-rc.3 and earlier versions, which stems from the return of a predictable UUID on failure of the random number generator, which could lead to compromised...

9.8CVSS6.3AI score0.00468EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/12/08 5:57 p.m.•24 views

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Summary Critical security vulnerabilities exist in both the UUIDv4 and UUID functions of the github.com/gofiber/utils package. When the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, the zero UUID...

9.8CVSS7.4AI score0.00468EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder