Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev

MEDIUM 5.3CVE-2021-3692 · GHSA-wwvv-x5mq-h3jj · Published 10/08/2021 · updated 17/06/2026

In short

CVE-2021-3692 is a MEDIUM (CVSS 5.3) vulnerability affecting yiisoft/yii2-dev, yii (yiiframework).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.2% of all vulnerabilities.
Fix: update to 2.0.43 or later.

Package	Affected versions	Patched versions
yiisoft/yii2-dev Packagist	`< 2.0.43`	`2.0.43`
yii yiiframework	`≥ 2.0.0, < 2.0.43`	`2.0.43`

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

NVD description

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.0.43

2.0.43

≥ 2.0.0, < 2.0.43

2.0.43

More vulnerabilities in yiisoft/yii2-dev

See all →