GO-2020-0018

Source
https://pkg.go.dev/vuln/GO-2020-0018
Import Source
https://vuln.go.dev/ID/GO-2020-0018.json
Aliases
Published
2021-04-14T20:04:52Z
Modified
2023-11-08T04:06:09.768106Z
Details

UUIDs generated using NewV1 and NewV4 may not read the expected number of random bytes. These UUIDs may contain a significantly smaller amount of entropy than expected, possibly leading to collisions.

References

Affected packages

Go / github.com/satori/go.uuid

Package

Name
github.com/satori/go.uuid

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.2.1-0.20181016170032-d91630c85102

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/satori/go.uuid",
            "symbols": [
                "NewV1",
                "NewV2",
                "NewV4",
                "rfc4122Generator.NewV1",
                "rfc4122Generator.NewV2",
                "rfc4122Generator.getClockSequence",
                "rfc4122Generator.getHardwareAddr"
            ]
        }
    ]
}

Database specific 

{
    "url": "https://pkg.go.dev/vuln/GO-2020-0018"
}