From a5fbe2ef09dd67f7aab1e6dfb432f6ccb56db77f Mon Sep 17 00:00:00 2001 From: Claudio Date: Wed, 20 Nov 2024 15:16:33 +0100 Subject: [PATCH] Update insecure-uuid-version.yaml (#3520) --- python/lang/security/insecure-uuid-version.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/python/lang/security/insecure-uuid-version.yaml b/python/lang/security/insecure-uuid-version.yaml index b5a8514b5a..00d78f516e 100644 --- a/python/lang/security/insecure-uuid-version.yaml +++ b/python/lang/security/insecure-uuid-version.yaml @@ -2,7 +2,7 @@ rules: - id: insecure-uuid-version patterns: - pattern: uuid.uuid1(...) - message: | + message: >- Using UUID version 1 for UUID generation can lead to predictable UUIDs based on system information (e.g., MAC address, timestamp). This may lead to security risks such as the sandwich attack. Consider using `uuid.uuid4()` instead for better randomness and security. metadata: references: @@ -30,4 +30,4 @@ rules: fix-regex: regex: uuid1 replacement: uuid4 - \ No newline at end of file +