{"action":"Upgrade showdoc/showdoc to 2.9.13 or later.","affected":[{"fixed":"2.9.13","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2021-3990"],"ecosystem":"Packagist","epss":0.00891,"exploited":false,"fixed_versions":["2.9.13"],"ghsa_id":"GHSA-vrgh-5w3c-ggf8","id":"tcs_01M5KF9DNRZ45TJX5E6PJFJVGG","modified_at":"2023-11-08T04:06:43.320701Z","published_at":"2021-12-03T20:38:50Z","references":["https://osv.dev/vulnerability/GHSA-vrgh-5w3c-ggf8","https://nvd.nist.gov/vuln/detail/CVE-2021-3990","https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0","https://github.com/star7th/showdoc","https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vrgh-5w3c-ggf8","url":"https://osv.dev/vulnerability/GHSA-vrgh-5w3c-ggf8"}],"summary":"showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}