{"id":"GO-2020-0018","details":"UUIDs generated using NewV1 and NewV4 may not read the expected\nnumber of random bytes. These UUIDs may contain a significantly smaller\namount of entropy than expected, possibly leading to collisions.\n","modified":"2022-08-29T16:50:59Z","published":"2021-04-14T20:04:52Z","withdrawn":"2024-05-15T05:37:10.979124Z","references":[{"type":"FIX","url":"https://github.com/satori/go.uuid/pull/75"},{"type":"FIX","url":"https://github.com/satori/go.uuid/commit/d91630c8510268e75203009fe7daf2b8e1d60c45"},{"type":"WEB","url":"https://github.com/satori/go.uuid/issues/73"}],"affected":[{"package":{"name":"github.com/satori/go.uuid","ecosystem":"Go","purl":"pkg:golang/github.com/satori/go.uuid"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.1-0.20181016170032-d91630c85102"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/satori/go.uuid","symbols":["NewV1","NewV2","NewV4","rfc4122Generator.NewV1","rfc4122Generator.NewV2","rfc4122Generator.getClockSequence","rfc4122Generator.getHardwareAddr"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2020-0018.json","url":"https://pkg.go.dev/vuln/GO-2020-0018"}}],"schema_version":"1.7.3"}