Unrated
BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.
CVE-2021-29245
First seen on SecPulse
References
- advisory blog.btcpayserver.org
- advisory github.com