Threats tagged 'ghsa-237r-r8m4-4q88'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.5%	CVE-2025-21617guzzlehttp/oauth-subscriber · Guzzle OAuth Subscriber has insufficient nonce entropy Medium6.3EPSS 0.5%2025-01-06GCVE DatabaseCVE-2025-21617 The Guzzle OAuth Subscriber before version 0.8.1 generates nonces with insufficient entropy using a non-cryptographically secure pseudorandom source. This weakness can expose servers to replay attacks if TLS is not employed. No workarounds are available. Users should upgrade to version 0.8.1 or later to address this issue. EPSS 0.5%Vulnerability CWE-338 #ghsa-237r-r8m4-4q88 #packagist	GCVE Database	2025-01-06

Page 1 of 1