Question: What is CVE-2025-21617?
Answer: CVE-2025-21617 is a vulnerability classified as medium with a CVSS score of 6.3. It falls under CWE-338 and affects the system as follows: Guzzle OAuth Subscriber signs Guzzle requests using OAuth 1.0. Prior to 0.8.1, Nonce generation does not use sufficient entropy nor a cryptographically secure pseudorandom source. This can leave servers vulnerable to replay attacks when TLS is not used. This vulnerability is fixed in 0.8.1.