{"action":"Upgrade github.com/miekg/dns to 1.1.25 or later.","affected":[{"fixed":"1.1.25","introduced":"0"}],"component":"github.com/miekg/dns","cve_ids":["CVE-2019-19794"],"ecosystem":"Go","epss":0.02066,"exploited":false,"fixed_versions":["1.1.25"],"ghsa_id":"GHSA-44r7-7p62-q3fr","id":"tcs_01M5KEVTR0HDEJW0CM9GMETCKD","modified_at":"2023-11-08T04:01:29.591612Z","published_at":"2021-05-18T21:09:13Z","references":["https://osv.dev/vulnerability/GHSA-44r7-7p62-q3fr","https://nvd.nist.gov/vuln/detail/CVE-2019-19794","https://github.com/coredns/coredns/issues/3519","https://github.com/coredns/coredns/issues/3547","https://github.com/miekg/dns/issues/1037","https://github.com/miekg/dns/issues/1043","https://github.com/miekg/dns/pull/1044","https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33","https://github.com/miekg/dns/compare/v1.1.24...v1.1.25","https://pkg.go.dev/vuln/GO-2020-0008"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-44r7-7p62-q3fr","url":"https://osv.dev/vulnerability/GHSA-44r7-7p62-q3fr"}],"summary":"miekg/dns insecurely generates random numbers"}