Go/github.com/rclone/rclone CVE-2020-28924: high 7.5, EPSS 1.38%
Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone
Action: Upgrade github.com/rclone/rclone to 1.53.3 or later.
go get github.com/rclone/rclone@v1.53.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.53.3 | - |
Fixed versions
| 1.53.3 |
Sources
- osv: GHSA-rmw5-xpg9-jr29
- https://nvd.nist.gov/vuln/detail/CVE-2020-28924
- https://github.com/rclone/rclone/issues/4783
- https://github.com/rclone/rclone
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIFT24Q6EFXLQZ24AER2QGFFZLMIPCD
- https://security.gentoo.org/glsa/202107-14
CVE-2020-28924 · published · modified · JSON