Use Of Insufficiently Random Values

zendframework/zendframework is vulnerable to insufficient entropy. The vulnerability is due to using PHP’s mt_rand() function as a fallback for generating random bytes, which is predictable and susceptible to brute force attacks on the seed.