{"action":"Upgrade pyrad to 2.1 or later.","affected":[{"fixed":"2.1","introduced":"0"}],"component":"pyrad","cve_ids":["CVE-2013-0294"],"ecosystem":"PyPI","epss":0.02857,"exploited":false,"fixed_versions":["2.1"],"ghsa_id":"GHSA-q4v3-wmm6-hcrx","id":"tcs_01M5KFVARHZHY9DS1KFVZPDTEM","modified_at":"2024-10-23T16:14:18.422408Z","published_at":"2022-05-05T00:29:22Z","references":["https://osv.dev/vulnerability/GHSA-q4v3-wmm6-hcrx","https://nvd.nist.gov/vuln/detail/CVE-2013-0294","https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5","https://bugzilla.redhat.com/show_bug.cgi?id=911682","https://exchange.xforce.ibmcloud.com/vulnerabilities/82133","https://github.com/pypa/advisory-database/tree/main/vulns/pyrad/PYSEC-2020-211.yaml","https://github.com/pyradius/pyrad","https://web.archive.org/web/20200228160027/http://www.securityfocus.com/bid/57984","http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html","http://www.openwall.com/lists/oss-security/2013/02/15/13"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-q4v3-wmm6-hcrx","url":"https://osv.dev/vulnerability/GHSA-q4v3-wmm6-hcrx"}],"summary":"pyrad is vulnerable to the use of Insufficiently Random Values"}