title: Insufficient randomness in github.com/Masterminds/goutils
description: Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.
problem types: CWE 330: Use of Insufficiently Random Values
affected:
{
vendor: github.com/Masterminds/goutils
product: github.com/Masterminds/goutils
collectionURL: https://pkg.go.dev
packageName: github.com/Masterminds/goutils
versions:
version: 0, lessThan: 1.1.1, status: affected, versionType: semver
programRoutines:
name: RandomAlphaNumeric
name: CryptoRandomAlphaNumeric
defaultStatus: unaffected
}