CVE-2021-4238

CVE-2021-4238 describes a critical vulnerability in the goutils_project goutils library where the RandomAlphaNumeric and CryptoRandomAlphaNumeric functions generate strings with significantly reduced entropy due to always including at least one digit. This flaw, rated 9.1 Critical (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H), allows unauthenticated attackers to remotely compromise confidentiality and availability with low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.