https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:12:46 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2026-ap81168 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: harbor-fips</p> <p>Multiple security vulnerabilities affect the harbor-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: harbor-fips</p> <p>Multiple security vulnerabilities affect the harbor-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ap81168 https://cve.radiocsirt.org/vuln/euvd-2026-20932 EUVD-2026-20932 https://cve.radiocsirt.org/vuln/euvd-2026-20932 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3538 <p>A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.</p> <p>A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3538 https://cve.radiocsirt.org/vuln/ghsa-33m6-q9v5-62r7 <p><strong>Affected:</strong> Go: github.com/satori/go.uuid</p> <p>### CVE Description for go.uuid A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.</p> <p>### Update on 19 September 2024 -- This vulnerability never existed in sif</p> <p>The [official NIST CVE-2021-3538 record](https://nvd.nist.gov/vuln/detail/CVE-2021-3538) says:</p> <p>&gt; A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45.</p> <p>That commit and that fix were never in a tagged release of satori/go.uuid, and prior to this announcement sif had used the last tag, 1.2.0. The NIST record says version 1.2.0 was vulnerable, but that&#39;s not true. So sif was never vulnerable to this. Also, beginning with version 2.0.0, sif does not use satori/go.uuid anymore.</p> <p>This update was made in response to issue #243 which has more details.</p> <p>The original, incorrect sif vulnerability description is below.</p> <p>-------------</p> <p>### Impact</p> <p>The siftool new command produces predictable UUID identifiers due to insecure randomness in the version of the `github.com/satori/go.uuid` module used as a dependency.</p> <p>### Patches</p> <p>A patch is available in version &gt;= v1.2.2 of the module. Users are encouraged to upgrade.</p> <p>Fixed by https://github.com/hpcng/sif/pull/90</p> <p>### Workarounds</p> <p>Users passing CreateInfo struct should…</p> <p><strong>Affected:</strong> Go: github.com/satori/go.uuid</p> <p>### CVE Description for go.uuid A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.</p> <p>### Update on 19 September 2024 -- This vulnerability never existed in sif</p> <p>The [official NIST CVE-2021-3538 record](https://nvd.nist.gov/vuln/detail/CVE-2021-3538) says:</p> <p>&gt; A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45.</p> <p>That commit and that fix were never in a tagged release of satori/go.uuid, and prior to this announcement sif had used the last tag, 1.2.0. The NIST record says version 1.2.0 was vulnerable, but that&#39;s not true. So sif was never vulnerable to this. Also, beginning with version 2.0.0, sif does not use satori/go.uuid anymore.</p> <p>This update was made in response to issue #243 which has more details.</p> <p>The original, incorrect sif vulnerability description is below.</p> <p>-------------</p> <p>### Impact</p> <p>The siftool new command produces predictable UUID identifiers due to insecure randomness in the version of the `github.com/satori/go.uuid` module used as a dependency.</p> <p>### Patches</p> <p>A patch is available in version &gt;= v1.2.2 of the module. Users are encouraged to upgrade.</p> <p>Fixed by https://github.com/hpcng/sif/pull/90</p> <p>### Workarounds</p> <p>Users passing CreateInfo struct should…</p> https://cve.radiocsirt.org/vuln/ghsa-33m6-q9v5-62r7 https://cve.radiocsirt.org/vuln/gsd-2021-3538 gsd-2021-3538 https://cve.radiocsirt.org/vuln/gsd-2021-3538 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510