Duplicate Advisory: GoUtils's randomly-generated alphanumeric strings contain significantly less entropy than expected

NGHIÊM TRỌNG 9.1CVE-2021-4238 · GHSA-3839-6r69-m497 · GHSA-xg2h-wx96-xgxr · Công bố 27/12/2022 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2021-4238 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.1) ảnh hưởng github.com/Masterminds/goutils, goutils (goutils project).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 1.4%, cao hơn 72.8% các lỗ hổng khác.
Cách xử lý: cập nhật lên 1.1.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
github.com/Masterminds/goutils Go	`< 1.1.1`	`1.1.1`
goutils goutils_project	`< 1.1.1`	`1.1.1`

Mô tả

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-xg2h-wx96-xgxr. This link is maintained to preserve external references.

Original Description

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

Mô tả của NVD

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.