{"action":"Upgrade yiisoft/yii2-dev to 2.0.43 or later.","affected":[{"fixed":"2.0.43","introduced":"0"}],"component":"yiisoft/yii2-dev","cve_ids":["CVE-2021-3692"],"ecosystem":"Packagist","epss":0.017,"exploited":false,"fixed_versions":["2.0.43"],"ghsa_id":"GHSA-wwvv-x5mq-h3jj","id":"tcs_01M5KFAF5PN47Q4JBP4R5T56DE","modified_at":"2023-11-08T04:06:17.044665Z","published_at":"2021-09-01T18:35:26Z","references":["https://osv.dev/vulnerability/GHSA-wwvv-x5mq-h3jj","https://nvd.nist.gov/vuln/detail/CVE-2021-3692","https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46","https://github.com/yiisoft/yii2","https://huntr.dev/bounties/55517f19-5c28-4db2-8b00-f78f841e8aba"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-wwvv-x5mq-h3jj","url":"https://osv.dev/vulnerability/GHSA-wwvv-x5mq-h3jj"}],"summary":"Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev"}