HIGH7.5
GHSA-hq3v-rg6f-6hx4
Use of Insufficiently Random Values in yiisoft/yii2-dev
Quick fix
GHSA-hq3v-rg6f-6hx4 — yiisoft/yii2-dev: upgrade to the fixed version with the command below.
composer require yiisoft/yii2-dev:^2.0.43Details
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/yiisoft/yii2-dev
Introduced in:
0Fixed in: 2.0.43Fix
composer require yiisoft/yii2-dev:^2.0.43