phpseclib\Crypt\Random::string breaks loopback requests

Hello.
A quick look revealed that phpseclib\Crypt\Random::string opens a session but never destroys it. As a result loopback request in WordPress gets broken (which affects the internal editor). I am not very familiar with the plugin but I suspect it is safe to destroy the session before return. Could you please fix it?
Thank you.