GMS-2021-80: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

May 21, 2021 (updated January 11, 2023)

A security-sensitive bug was discovered by Open Source Developer Erik Sundell of Sundell Open Source Consulting AB.

The functions RandomAlphaNumeric(int) and CryptoRandomAlphaNumeric(int) are not as random as they should be.

References

github.com/Masterminds/goutils/security/advisories/GHSA-xg2h-wx96-xgxr
github.com/advisories/GHSA-xg2h-wx96-xgxr

Detect and mitigate GMS-2021-80 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →