logo

Database

Insecure generation of random numbers In zendframework/zendframework1

Description

Potential Insufficient Entropy

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. GCVE-ZF2016-11

References

1. http://framework.zend.com/security/advisory/ZF2016-012. https://bugs.php.net/bug.php?id=700143. https://github.com/paragonie/random_compat/issues/96

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.