p PatchFirst

PatchFirst · Latest vulnerabilities

paragonie/random_compat vulnerabilities

Vulnerabilities published for paragonie/random_compat in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-3fmq-x9q6-wm39

    Not ratedFix available

    random_compat Uses insecure CSPRNG

    random_compat versions prior to 2.0 are affected by a security vulnerability related to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators (CSPRNG). The affected versions use openssl_random_pseudo_bytes(), which may result in insufficient entropy and compromise the security of generated random numbers.

    paragonie/random_compatPHP
    • Update to 2.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →