Search by 
paragonie/random_compat Security Advisories for 0.9.0 (1)
-
Uses insecure CSPRNG (openssl_random_pseudo_bytes())
Affected version: <2.0
Reported by:
FriendsOfPHP/security-advisories