← Database

CVE-2021-4238

CRITICAL CVSS: 9.1 Published: 2022-12-27 Modified: 2026-06-17

Description

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

Affected Platforms

Goutils Project Goutils

Weakness Type

CWE-331

References