Lucene search
+L

1 matches found

Friends Of PHP
Friends Of PHP
added 2016/03/16 12:0 a.m.17 views

Uses insecure CSPRNG (openssl_random_pseudo_bytes())

It's not fork safe - In most versions of PHP, it lies about being secure - And today I learned that OpenSSL, by default i.e. unchangable from PHP land uses MD5 as a CSPRNG thanks @atoponce I'm stuck between several possible avenues: - Release a new version v1.3.0 or most likely v2.0.0 that...

7.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder