Search by 
zendframework/zend-captcha Security Advisories for 2.3.5 (1)
-
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
Affected version: >=2.0.0,<2.4.9|>=2.5.0,<2.5.2
Reported by:
FriendsOfPHP/security-advisories