| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/dinever/golf | < 0.3.0 | 0.3.0 |
| golf | < 0.3.0 | 0.3.0 |
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free