All vulnerabilities
CVE-2021-4238
Insufficient randomness in github.com/Masterminds/goutils
Description
Randomly-generated alphanumeric strings contain significantly less entropy than expected.
The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.
Patch Available
Fix available through Seal Security.
No upgrade required, protect your application instantly.
Fix without upgrading
Score
Severity
Ecosystem
GO
Publish Date
July 1, 2022
Modified Date
May 20, 2024
Score Vector
Affected Versions
