CVE-2021-3538CWE-338

CVE-2021-3538: vulnerability in satori/go.uuid

Published · Updated

Follow this CVE+ Monitor satori/go.uuid+ Monitor github.com/satori/go.uuid

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%
A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.
Affected products
n/a · satori/go.uuid