2 matches found
Predictable UUID Generation
github.com/gofiber/utils is vulnerable to predictable UUID generation.The vulnerability is due to fallback to predictable UUID values when crypto/rand.Read fails, which allows an attacker to guess UUIDs and exploit security-critical operations relying on them...
9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References4Affected Software1
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Overview Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG due to the UUIDv4 and UUID functions silently returning predictable values, such as the zero UUID, when the cryptographic random number generator fails. An attacker can...
9.8CVSS7.7AI score0.00468EPSS
SaveExploits0References4
20