rand_os crate is unmaintained

The randos crate is deprecated and no longer actively maintained, as OsRng is now part of randcore. If you are using this crate, consider upgrading to randcore 0.5.1 or higher...

DEBIAN-CVE-2016-10743

hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...

PT-2019-7541

Name of the Vulnerable Software and Affected Versions hostapd versions prior to 2.6 Description The issue is related to the use of a low-quality pseudorandom number generator PRNG in hostapd. This PRNG is reached through an os random function call. Recommendations For versions prior to 2.6, updat...