gesec: envolope.go: G401 (CWE-326): Use of weak cryptographic primitive

phires / go-guerrilla

MIT License

112 stars 18 forks source link

gesec: envolope.go: G401 (CWE-326): Use of weak cryptographic primitive #8

Closed phires closed 1 year ago

phires commented 1 year ago

[/go-guerrilla/mail/envelope.go:164] - G401 (CWE-326): Use of weak cryptographic primitive (Confidence: HIGH, Severity: MEDIUM)
    163:        var queueID = fmt.Sprintf("%x%x", time.Now().Unix(), clientID)
  > 164:        return fmt.Sprintf("%x", md5.Sum([]byte(queueID)))
    165: }