pubnub Insufficient Entropy vulnerability

Description

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0; versions of the package pubnub/pubnub before 6.1.

Recommendation

Update the pubnub package to the latest compatible version. Followings are version details:

• Affected version(s): < 7.4.0
• Patched version(s): 7.4.0

References

• GHSA-5844-q3fc-56rh
• security.snyk.io
• CVE-2023-26154
• CWE-331
• CAPEC-310
• OWASP 2021-A2
• OWASP 2021-A6