CVE-2022-28355
HIGHScala.js < 1.10.0 - Use of Insufficiently Random Values in randomUUID
Title source: llmDescription
randomUUID in Scala.js before 1.10.0 generates predictable values.
References (4)
Core 4
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/scala-js/scala-js/issues/4657
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/scala-js/scala-js/releases
Release Notes, Third Party Advisory x_refsource_confirm
https://www.scala-js.org/news/2022/04/04/announcing-scalajs-1.10.0/
Mitigation, Third Party Advisory x_refsource_confirm
https://github.com/scala-js/scala-js/security/advisories/GHSA-j2f9-w8wh-9ww4
Scores
CVSS v3
7.5
EPSS
0.0134
EPSS Percentile
67.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-330
Status
published
Products (1)
scala-js/scala.js
< 1.10.0
Published
Apr 02, 2022
Tracked Since
Feb 18, 2026