← All advisories

Medium severity6.5NVD Advisory· Published Dec 1, 2021· Updated Jun 17, 2026

CVE-2021-3990

CVE-2021-3990

Description

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
showdoc/showdocPackagist	< 2.9.13	2.9.13

Affected products

3

ShowDoc/ShowDoc
cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*
Range: <2.9.13
ghsa-coords
pkg:composer/showdoc/showdoc
Range: < 2.9.13
star7th/star7th/showdocv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9fnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-vrgh-5w3c-ggf8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3990ghsaADVISORY

News mentions

0

No linked articles in our index yet.