← All advisories

Medium severity5.9NVD Advisory· Published Aug 4, 2021· Updated Jun 17, 2026

CVE-2021-3678

CVE-2021-3678

Description

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
showdoc/showdocPackagist	< 2.9.8	2.9.8

Affected products

3

ShowDoc/ShowDoc
cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*
Range: <2.9.8
star7th/star7th/showdocv5
Range: unspecified
ghsa-coords
pkg:composer/showdoc/showdoc
Range: < 2.9.8

Patches

Vulnerability mechanics

References

4

github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-j85q-whc9-g4p9ghsaADVISORY
huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512813de4nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-3678ghsaADVISORY

News mentions

0

No linked articles in our index yet.