CVE-2021-3538 (High) detected in github.com/docker/distribution-a637ebcd0164e27be6ee50a5df95655e51b93e18 - autoclosed #61
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-3538 - High Severity Vulnerability
The toolkit to pack, ship, store, and deliver container content
Dependency Hierarchy:
Found in HEAD commit: 2ba890cd094fe9f32531e2f3491a16207038088f
Found in base branch: main
A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.
Publish Date: 2021-06-02
URL: CVE-2021-3538
Base Score Metrics:
Type: Upgrade version
Release Date: 2021-06-02
Fix Resolution: github.com/satori/go.uuid - 75cca531ea763666bc46e531da3b4c3b95f64557
The text was updated successfully, but these errors were encountered: