Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc

MEDIUM 5.9CVE-2021-3678 · GHSA-j85q-whc9-g4p9 · Published 04/08/2021 · updated 17/06/2026

In short

CVE-2021-3678 is a MEDIUM (CVSS 5.9) vulnerability affecting showdoc/showdoc, showdoc (showdoc).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
Fix: update to 2.9.8 or later.

Package	Affected versions	Patched versions
showdoc/showdoc Packagist	`< 2.9.8`	`2.9.8`
showdoc showdoc	`< 2.9.8`	`2.9.8`

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

NVD description

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.9.8

2.9.8

< 2.9.8

2.9.8

More vulnerabilities in showdoc/showdoc

See all →