Rule Explorer

The error from crypto/rand.Read (or uuid.NewRandom, which wraps crypto/rand) is silently swallowed: the failure path either returns without surfacing the error, returns the all-zero UUID constant, or falls back to another UUID/token generator. When the OS entropy source fails, the resulting identifiers become predictable (e.g. always the zero UUID), which br

GoCVE-2025-66565GHSA-M98W-CQP3-QCQRCWE-252CWE-331

Generating a Curve25519 key pair without appropriately initializing the randomness pool can result in low-entropy, duplicate, or predictable cryptographic keys. Ensure that the PRNG is correctly initialized and salted with sufficient hardware or system entropy (e.g., via `RNG.begin()` and `RNG.stir()`) prior to invoking `Curve25519::dh1()`.

C++CVE-2025-52464CWE-331CWE-334