{"action":"Upgrade paragonie/random_compat to 2.0 or later.","affected":[{"fixed":"2.0","introduced":"0"}],"component":"paragonie/random_compat","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0"],"ghsa_id":"GHSA-3fmq-x9q6-wm39","id":"tcs_01M5KESYPCEQBPNC69N10VGSMP","modified_at":"2024-12-02T05:42:56.201685Z","published_at":"2024-05-17T23:27:19Z","references":["https://osv.dev/vulnerability/GHSA-3fmq-x9q6-wm39","https://github.com/paragonie/random_compat/issues/96","https://github.com/FriendsOfPHP/security-advisories/blob/master/paragonie/random_compat/2016-03-16.yaml","https://github.com/paragonie/random_compat"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-3fmq-x9q6-wm39","url":"https://osv.dev/vulnerability/GHSA-3fmq-x9q6-wm39"}],"summary":"random_compat Uses insecure CSPRNG"}