You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.
mend-for-github.aaakk.us.kgbot
changed the title
CVE-2021-3538 (High) detected in github.com/docker/distribution-v2.7.1
CVE-2021-3538 (High) detected in github.com/docker/distribution-v2.7.1 - autoclosed
Jun 8, 2022
✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
CVE-2021-3538 - High Severity Vulnerability
Vulnerable Library - github.com/docker/distribution-v2.7.1
The toolkit to pack, ship, store, and deliver container content
Dependency Hierarchy:
Found in base branch: brightcove
Vulnerability Details
A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.
Publish Date: 2021-06-02
URL: CVE-2021-3538
CVSS 3 Score Details (9.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: satori/go.uuid#75
Release Date: 2021-06-02
Fix Resolution: github.com/satori/go.uuid - 75cca531ea763666bc46e531da3b4c3b95f64557
The text was updated successfully, but these errors were encountered: