PT-2025-49761 · Unknown · Fiber Utils
CVE-2025-66565
·
Publicado
2025-12-08
·
Atualizado
2026-07-30
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Fiber Utils versions 2.0.0-rc.3 and below
Description
Fiber Utils is a collection of functions for Fiber. In versions 2.0.0-rc.3 and below, if the system’s cryptographic random number generator (crypto/rand) fails, the software silently reverts to generating predictable UUID values, including the zero UUID "00000000-0000-0000-0000-000000000000". This occurs due to failures in the
crypto/rand.Read() function, potentially compromising the security of Fiber applications using these functions for security-critical operations.Recommendations
Update to version 2.0.0-rc.4 or later.
Exploit
Correção
Unchecked Return Value
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Fiber Utils