theis/webspeaker
Watch
1
2
Fork
You've already forked webspeaker
 1
Code Issues 41 Pull requests Projects Releases 18 Packages 5 Wiki Activity Actions

Insecure Randomness for Tokens #15

New issue
Open
opened 2025-10-17 21:20:52 +00:00 by theis · 0 comments
theis commented 2025-10-17 21:20:52 +00:00
Owner
Copy link

In auth/token.go, refresh tokens are generated using a non-cryptographically secure random function, which could make them predictable.

In auth/token.go, refresh tokens are generated using a non-cryptographically secure random function, which could make them predictable.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
preview_player_ui
voice_management_settings
single_sign_on_integration
0.5.1
0.5.0
0.4.0
0.3.0
0.2.92
0.2.91
0.2.9
0.2.8
0.2.7
0.2.51
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
Passkey-Base
0.1
Labels
Clear labels   
bug
Something that is broken and need fixing or misbehaving

  
Clean up

   
feature

   
improvment
No labels
bug
Clean up
feature
improvment
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
theis/webspeaker#15
No description provided.