{"action":"Upgrade showdoc/showdoc to 2.9.8 or later.","affected":[{"fixed":"2.9.8","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2021-3678"],"ecosystem":"Packagist","epss":0.01064,"exploited":false,"fixed_versions":["2.9.8"],"ghsa_id":"GHSA-j85q-whc9-g4p9","id":"tcs_01M5KF4CJ2KW57VBVDJ9AF4JBR","modified_at":"2023-11-08T04:06:16.242502Z","published_at":"2021-09-02T17:07:48Z","references":["https://osv.dev/vulnerability/GHSA-j85q-whc9-g4p9","https://nvd.nist.gov/vuln/detail/CVE-2021-3678","https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370","https://huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512813de4"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-j85q-whc9-g4p9","url":"https://osv.dev/vulnerability/GHSA-j85q-whc9-g4p9"}],"summary":"Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc"}