Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OmniAuth Ruby gem 安全漏洞
Vulnerability Description
OmniAuth Ruby gem是一款使用Rack中间件的身份验证系统。 Ruby gem 1.0.0及之前版本的random_password_generator(又名RandomPasswordGenerator)存在安全漏洞，攻击者利用该漏洞可方便地进行密码预测。
CVSS Information
N/A
Vulnerability Type
N/A