{"action":"Upgrade keypair to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"}],"component":"keypair","cve_ids":["CVE-2021-41117"],"ecosystem":"npm","epss":0.03091,"exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-3f99-hvg4-qjwj","id":"tcs_01M5KEX4M56Z2X2KASDPKS0PDA","modified_at":"2026-07-08T06:27:28.231461530Z","published_at":"2021-10-11T17:09:05Z","references":["https://osv.dev/vulnerability/GHSA-3f99-hvg4-qjwj","https://github.com/juliangruber/keypair/security/advisories/GHSA-3f99-hvg4-qjwj","https://nvd.nist.gov/vuln/detail/CVE-2021-41117","https://github.com/juliangruber/keypair/commit/9596418d3363d3e757676c0b6a8f2d35a9d1cb18","https://github.com/juliangruber/keypair","https://github.com/juliangruber/keypair/releases/tag/v1.0.4","https://securitylab.github.com/advisories/GHSL-2021-1012-keypair"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-3f99-hvg4-qjwj","url":"https://osv.dev/vulnerability/GHSA-3f99-hvg4-qjwj"}],"summary":"Insecure random number generation in keypair"}