Approved changes feed: RSS · Atom

cpe:2.3:a:rand_core_project:rand_core:*:*:*:*:*:rust:*:*

part: a version: * update: *

VendorRand Core Project (888ba76a-ad03-5be7-b3a7-8114cb6a4872)
ProductRand Core (cb9fa8d3-f2f0-58ac-b507-5c8bfe2cb825)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rust-rand-core purl2cpe 2026-06-01 10:12:06.269878
pkg:deb/ubuntu/rust-rand-core purl2cpe 2026-06-01 10:12:06.269880
pkg:github/rust-random/rand purl2cpe 2026-06-01 10:12:06.269882
pkg:rpm/fedora/rust-rand_core purl2cpe 2026-06-01 10:12:06.269883
pkg:rpm/opensuse/rust-rand_core purl2cpe 2026-06-01 10:12:06.269884

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27378 vulnerable 2026-06-08 05:31:21.055377 Details available
An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.
Published: 2021-02-18T03:35:07.000Z
Updated: 2024-08-03T20:48:16.403Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.