CVE-2021-3538 on package github.com/satori/go.uuid

[Benjaminvdv]

Hello,

Go module github.com/satori/go.uuid version 1.2.0 is unmaintained and has a weak number generator, thus should be replaced.

CVE details: https://nvd.nist.gov/vuln/detail/CVE-2021-3538
Reported issue: satori/go.uuid#120 (which also links to satori/go.uuid#73 for more context.

As others have advised, this could potentially be replaced with https://github.com/gofrs/uuid or https://github.com/google/uuid.

Hopefully this provides enough context.

With regards,
Benjamin

[Tieske]

Pr was merged, closing.