IMPORTANT: Unresolved CVE on latest release (CVE-2021-3538 )

[cameracker]

A CVE has been filed for a 3 year old defect that is fixed on master but has never been tagged and released. With this defect, periodically the UUID V4s will contain mostly 0's.

https://github.com/gofrs/uuid is a maintained fork that addresses this problem and is actively maintained.

https://github.com/satori/go.uuid/issues/73

[FlyingOnion]

The fork github.com/gofrs/uuid does not support go module, so I cherry-pick it to my gitee repo https://gitee.com/gofrs/uuid. Package main page: https://pkg.go.dev/gitee.com/gofrs/uuid/v4

This organization has nothing to do with gofrs in github. I just want to urge them to support go module asap.