Search by 
zendframework/zend-captcha Security Advisories for 2.2.3 (1)
-
[HIGH] Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
PKSA-kv74-yjnp-pcr9 GHSA-mg4x-prh7-g4mx
Affected version: >=2.0.0,<2.4.9|>=2.5.0,<2.5.2
Reported by:
GitHub, FriendsOfPHP/security-advisories