crypto/rand vulnerabilities

1 known vulnerability in crypto/rand from Go standard library. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  crypto/rand: Loop with Unreachable Exit Condition

  CVE-2022-30634Jul 15, 2022Go standard libraryEPSS 2.28%

  Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.