{"id":"CVE-2021-3689","details":"yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator","aliases":["GHSA-hq3v-rg6f-6hx4"],"modified":"2026-08-07T17:02:22.793060Z","published":"2021-08-10T11:15:09.640Z","references":[{"type":"FIX","url":"https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46"},{"type":"EVIDENCE","url":"https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/yiisoft/yii2","events":[{"introduced":"ae8d9782707b89315194ec70a139fece122b8977"},{"fixed":"540a9011af08ab9843a50e4d14141724a4610b9b"},{"fixed":"13f27e4d920a05d53236139e8b07007acd046a46"}],"database_specific":{"cpe":"cpe:2.3:a:yiiframework:yii:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0.0"},{"fixed":"2.0.43"}],"source":["CPE_RANGE","REFERENCES"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3689.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}