{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.19.0"}],"component":"stormpath/sdk","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q8fc-v85f-78pw","id":"tcs_01M5KF73P4N7MDJXGAH27A8F0P","modified_at":"2024-12-04T05:40:09.638665Z","published_at":"2024-05-29T13:09:29Z","references":["https://osv.dev/vulnerability/GHSA-q8fc-v85f-78pw","https://github.com/stormpath/stormpath-sdk-php/issues/132","https://github.com/FriendsOfPHP/security-advisories/blob/master/stormpath/sdk/2017-11-20.yaml","https://github.com/stormpath/stormpath-sdk-php","https://github.com/stormpath/stormpath-sdk-php/blob/15aee3007b8aa41c20cdf28fd650b8a2368a7fa9/src/Util/UUID.php#L167-L181","https://github.com/stormpath/stormpath-sdk-php/blob/62698ea98ef89217f932e28cf3e511d39af3b4cf/src/Authc/Api/ApiKeyEncryptionOptions.php#L48-L50"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-q8fc-v85f-78pw","url":"https://osv.dev/vulnerability/GHSA-q8fc-v85f-78pw"}],"summary":"stormpath/sdk uses Insecure Random Number Generator"}