github_osv/GHSA-6g33-f262-xjp4
Cryptographically Weak PRNG in randomatic
Affected versions of `randomatic` generate random values using a cryptographically weak psuedo-random number generator. This may result in predictable values instead of random values as intended.
## Recommendation
Update to version 3.0.0 or later.
gitlab/npm/randomatic/CVE-2017-16028
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The oauth Random Token is generated using a non-cryptographically strong RNG (`Math.random()`).