[MEDIUM] Guzzle OAuth Subscriber has insufficient nonce entropy

PKSA-pg71-gz29-h5sq CVE-2025-21617 GHSA-237r-r8m4-4q88

Affected package: guzzlehttp/oauth-subscriber

Affected version: <0.8.1

Reported by:
GitHub