GHSA-hq3v-rg6f-6hx4

Source

https://github.com/advisories/GHSA-hq3v-rg6f-6hx4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-hq3v-rg6f-6hx4/GHSA-hq3v-rg6f-6hx4.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-hq3v-rg6f-6hx4

Aliases

CVE-2021-3689

Published

2021-09-01T18:35:34Z

Modified

2023-11-01T04:55:48Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

Use of Insufficiently Random Values in yiisoft/yii2-dev

Details

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

Database specific

{
    "cwe_ids": [
        "CWE-330"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-08-30T20:28:40Z",
    "nvd_published_at": "2021-08-10T11:15:00Z",
    "severity": "HIGH"
}

References

Affected packages

Packagist / yiisoft/yii2-dev

Package

Name: yiisoft/yii2-dev
Purl: pkg:composer/yiisoft/yii2-dev

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.43

Affected versions

2.*

2.0.0-alpha

2.0.0-beta

2.0.0-rc

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.0.10

2.0.11

2.0.11.1

2.0.11.2

2.0.12

2.0.12.1

2.0.12.2

2.0.13

2.0.13.1

2.0.13.2

2.0.13.3

2.0.14

2.0.14.1

2.0.14.2

2.0.15

2.0.15.1

2.0.16

2.0.16.1

2.0.17

2.0.18

2.0.19

2.0.20

2.0.21

2.0.22

2.0.23

2.0.24

2.0.25

2.0.26

2.0.27

2.0.28

2.0.29

2.0.30

2.0.31

2.0.32

2.0.33

2.0.34

2.0.35

2.0.36

2.0.37

2.0.38

2.0.39

2.0.39.1

2.0.39.2

2.0.39.3

2.0.40

2.0.41

2.0.41.1

2.0.42

2.0.42.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-hq3v-rg6f-6hx4/GHSA-hq3v-rg6f-6hx4.json"