Packagist/stormpath/sdk: medium 5.3
stormpath/sdk uses Insecure Random Number Generator
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.19.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-q8fc-v85f-78pw
- https://github.com/stormpath/stormpath-sdk-php/issues/132
- https://github.com/FriendsOfPHP/security-advisories/blob/master/stormpath/sdk/2017-11-20.yaml
- https://github.com/stormpath/stormpath-sdk-php
- https://github.com/stormpath/stormpath-sdk-php/blob/15aee3007b8aa41c20cdf28fd650b8a2368a7fa9/src/Util/UUID.php#L167-L181
- https://github.com/stormpath/stormpath-sdk-php/blob/62698ea98ef89217f932e28cf3e511d39af3b4cf/src/Authc/Api/ApiKeyEncryptionOptions.php#L48-L50
published · modified · JSON