Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc

MÉDIO 5.9CVE-2021-3678 · GHSA-j85q-whc9-g4p9 · Published 04/08/2021 · updated 17/06/2026

Em resumo

CVE-2021-3678 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta showdoc/showdoc, showdoc (showdoc).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 64.7% das vulnerabilidades.
Correção: atualize para 2.9.8 ou posterior.

Package	Affected versions	Patched versions
showdoc/showdoc Packagist	`< 2.9.8`	`2.9.8`
showdoc showdoc	`< 2.9.8`	`2.9.8`

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

NVD description

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.9.8

2.9.8

< 2.9.8

2.9.8

Mais vulnerabilidades de showdoc/showdoc

Ver tudo →