Lucene search

K
githubGitHub Advisory DatabaseGHSA-3FMQ-X9Q6-WM39
HistoryMay 17, 2024 - 11:27 p.m.

random_compat Uses insecure CSPRNG

2024-05-1723:27:19
CWE-331
GitHub Advisory Database
github.com
5
random_compat
security vulnerability
openssl_random_pseudo_bytes

7 High

AI Score

Confidence

Low

random_compat versions prior to 2.0 are affected by a security vulnerability related to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators (CSPRNG). The affected versions use openssl_random_pseudo_bytes(), which may result in insufficient entropy and compromise the security of generated random numbers.

CPENameOperatorVersion
paragonie/random_compatlt2.0

7 High

AI Score

Confidence

Low