CVE-2026-47831 [HIGH] – Use of a cryptographically weak random number generator in the GenerateRandomPassword func

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22.
Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.