CVEs affecting projects tracked on Release Alert, from NVD & OSV.
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator