{"action":"Upgrade yiisoft/yii2-dev to 2.0.43 or later.","affected":[{"fixed":"2.0.43","introduced":"0"}],"component":"yiisoft/yii2-dev","cve_ids":["CVE-2021-3689"],"ecosystem":"Packagist","epss":0.01902,"exploited":false,"fixed_versions":["2.0.43"],"ghsa_id":"GHSA-hq3v-rg6f-6hx4","id":"tcs_01M5KF3TGCP1HYKA3157GAZGSA","modified_at":"2023-11-08T04:06:16.921517Z","published_at":"2021-09-01T18:35:34Z","references":["https://osv.dev/vulnerability/GHSA-hq3v-rg6f-6hx4","https://nvd.nist.gov/vuln/detail/CVE-2021-3689","https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46","https://github.com/yiisoft/yii2","https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hq3v-rg6f-6hx4","url":"https://osv.dev/vulnerability/GHSA-hq3v-rg6f-6hx4"}],"summary":"Use of Insufficiently Random Values in yiisoft/yii2-dev"}