—

GO-2022-0411

Insufficient randomness in github.com/Masterminds/goutils

Quick fix

GO-2022-0411 — github.com/Masterminds/goutils: upgrade to the fixed version with the command below.

go get github.com/Masterminds/goutils@v1.1.1

Details

Randomly-generated alphanumeric strings contain significantly less entropy than expected.

The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/Masterminds/goutils

Introduced in: 0Fixed in: 1.1.1

Fixgo get github.com/Masterminds/goutils@v1.1.1

References

https://github.com/Masterminds/goutils/commit/869801f20f9f1e7ecdbdb6422049d8241270d5e1[FIX]