CVE-2025-66565: Go Crypto Rand Silent Failure Fallbackcve-2025-66565-go-crypto-rand-silent-failure-fallback
The error from crypto/rand.Read (or uuid.NewRandom, which wraps crypto/rand) is silently swallowed: the failure path either returns without surfacing the error, returns the all-zero UUID constant, or falls back to another UUID/token generator. When the OS entropy source fails, the resulting identifiers become predictable (e.g. always the zero UUID), which br