p PatchFirst

GHSA-q8fc-v85f-78pw

GHSA-q8fc-v85f-78pw · stormpath/sdk uses Insecure Random Number Generator

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The vulnerability pertains to the usage of an insecure random number generator (RNG) in the "stormpath-sdk-php" library. Specifically, the issue is present in the generation of UUID (Universally Unique Identifier) version 4 within the codebase.

CVSS 5.3 · Medium

Published
Updated

Stack: php

Affected products and versions

  • stormpath/sdk Packagist

    Versions
    • 0.1.0
    • 0.2.0
    • 0.3.0
    • 0.3.1
    • 0.3.2
    • 1.0.0.beta
    • 1.0.1.beta
    • 1.1.0.beta
    • 1.10.0.beta
    • 1.11.0.beta
    • 1.12.0
    • 1.12.1
    • 1.12.2
    • 1.13.0
    • 1.14.0
    • 1.15.0
    • 1.16.0
    • 1.17.0
    • 1.17.1
    • 1.17.2
    • 1.18.0
    • 1.19.0
    • 1.2.0.beta
    • 1.2.1.beta
    • 1.3.0.beta
    • 1.4.0.beta
    • 1.5.0.beta
    • 1.6.0.beta
    • 1.7.0.beta
    • 1.8.0.beta
    • 1.8.1.beta
    • 1.9.0.beta
    Affected ranges
    • ECOSYSTEM: ≤ 1.19.0

    No fix published

Original sources

Check your server →