MEDIUM5.3
GHSA-wwvv-x5mq-h3jj
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
Quick fix
GHSA-wwvv-x5mq-h3jj — yiisoft/yii2-dev: upgrade to the fixed version with the command below.
composer require yiisoft/yii2-dev:^2.0.43Details
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/yiisoft/yii2-dev
Introduced in:
0Fixed in: 2.0.43Fix
composer require yiisoft/yii2-dev:^2.0.43