Uses insecure CSPRNG (openssl_random_pseudo_bytes())

PKSA-cncr-q695-v65g

Affected package: paragonie/random_compat

Affected version: <2.0

Reported by:
FriendsOfPHP/security-advisories