id: GO-2022-0912
modules:
    - module: github.com/sylabs/sif
      versions:
        - fixed: 1.2.3
      vulnerable_at: 1.2.2
summary: Predictable SIF UUID Identifiers in github.com/sylabs/sif
cves:
    - CVE-2021-29499
ghsas:
    - GHSA-4gh8-x3vv-phhg
references:
    - advisory: https://github.com/sylabs/sif/security/advisories/GHSA-4gh8-x3vv-phhg
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-29499
    - fix: https://github.com/sylabs/sif/commit/193962882122abf85ff5f5bcc86404933e71c07d
    - web: https://github.com/satori/go.uuid/issues/73
source:
    id: GHSA-4gh8-x3vv-phhg
    created: 2024-08-20T14:29:21.80878-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE