yiisoft/yii2-dev Security Advisories for 2.0.20 (2)
-
[HIGH] Use of Insufficiently Random Values in yiisoft/yii2-dev
PKSA-gr88-dv3s-951n CVE-2021-3689 GHSA-hq3v-rg6f-6hx4
Affected version: <2.0.43
Reported by:
GitHub -
[MEDIUM] Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
PKSA-26mg-s28k-sb3m CVE-2021-3692 GHSA-wwvv-x5mq-h3jj
Affected version: <2.0.43
Reported by:
GitHub