Search by 
paragonie/random_compat Security Advisories for v1.2.2 (1)
-
Uses insecure CSPRNG (openssl_random_pseudo_bytes())
Affected version: <2.0
Reported by:
FriendsOfPHP/security-advisories