Description
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| github.com/dinever/golf | github.com/dinever/golf | < 0.3.0 | 0.3.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/dinever/golf | < 0.3.0 | 0.3.0 | GHSA-q9qr-jwpw-3qvv |