Common Weakness Enumeration

CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)

Description

A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-337 ordered by modification date.

5 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-h75p-j8xm-m278	CVE-2026-26018	HIGH	golang/github.com/coredns/coredns	CoreDNS Loop Detection Denial of Service Vulnerability	2026-03-06
GHSA-gr7h-xw4f-wh86	CVE-2025-62710	MODERATE	maven/org.sakaiproject.kernel/sakai-kernel-impl	Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl	2025-10-24
GHSA-phh4-3hmm-24rx	-	HIGH	golang/github.com/juju/juju	Duplicate Advisory: Juju makes Use of Weak Credentials	2025-08-26
GHSA-mh98-763h-m9v4	CVE-2024-7558	MODERATE	golang/github.com/juju/juju	JUJU_CONTEXT_ID is a predictable authentication secret	2024-10-09
GHSA-rgrf-6mf5-m882	CVE-2024-22194	LOW	pypi/case-utils pypi/cdo-local-uuid	cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code	2024-09-13