Skip to content
OpenAdvisories

Package · Packagist

paragonie/random_compat

1 known vulnerabilities.

1 result · Feed

  • Low —

    random_compat Uses insecure CSPRNG

    random_compat versions prior to 2.0 are affected by a security vulnerability related to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators (CSPRNG). The affected versions use openssl_random_pseudo_bytes(), which may result in insuf…