~ / search / GHSA-wwvv-x5mq-h3jj

GHSA-wwvv-x5mq-h3jj

Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3692

Packages

EcosystemPackageAffectedFixed in
Packagist yiisoft/yii2-dev < 2.0.43 2.0.43

Details

As written in the advisory (Markdown source, shown as plain text).

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

References

External links from the advisory. They lead to third-party sites.