Lucene search
+L

2 matches found

Veracode
Veracode
•added 2026/03/31 3:55 a.m.•14 views

Predictable UUID Generation

github.com/gofiber/utils is vulnerable to predictable UUID generation.The vulnerability is due to fallback to predictable UUID values when crypto/rand.Read fails, which allows an attacker to guess UUIDs and exploit security-critical operations relying on them...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/02/09 6:04 p.m.•15 views

CVE-2025-66630 Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID functions, application code may...

9.2CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder