CVE catalog

CVE-2021-4238

golang-github-masterminds-goutils: CVE-2021-4238

[CVE catalog]

Severity
High · CVSS 7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.36% · Oct 25, 2026

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-github-masterminds-goutilssid1.1.1-4not affected
Debiangolang-github-masterminds-goutilsforky1.1.1-4not affected
Debiangolang-github-masterminds-goutilstrixie1.1.1-4not affected
Debiangolang-github-masterminds-goutilsbookworm1.1.1-4not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-github-masterminds-goutilssourcesidNot affectedunimportantNot reportedNot reported
Debiangolang-github-masterminds-goutilssourceforkyNot affectedunimportantNot reportedNot reported
Debiangolang-github-masterminds-goutilssourcetrixieNot affectedunimportantNot reportedNot reported
Debiangolang-github-masterminds-goutilssourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX]