Security
فارسی
All products

sylius/sylius

Composer · Package
35 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Ability to switch customer email address on account detail page and stay verifiedCVE-2020-15245 · GHSA-6GW4-X63H-5499Version ranges need review. sylius/sylius Composer Medium Fix reported
XSS injection in the Grid component of SyliusCVE-2019-12186 · GHSA-RC5R-697F-28X6Version ranges need review. sylius/grid-bundlesylius/grid Composer Medium Fix reported
Sylius: IDOR on Shop Payment Request API endpointsCVE-2026-53639 · GHSA-MR9R-H354-966R sylius/sylius Composer Medium Fix reported
Sylius: Cart FormComponent allows modification or deletion of an already-completed orderCVE-2026-53637 · GHSA-5597-7RMH-97Q5 sylius/sylius Composer Medium Fix reported
Sylius: Channel-based payment method restriction bypass on shop account orders API endpointCVE-2026-53638 · GHSA-6955-HRM5-C4QP sylius/sylius Composer Medium Fix reported
List of order ids, number, items total and token value exposed for unauthorized uses via new APICVE-2021-32720 · GHSA-RPXH-VG2X-526V sylius/sylius Composer Medium Fix reported
Internal exception message exposure for login action in SyliusCVE-2019-16768 · GHSA-3R8J-PMCH-5J2H sylius/sylius Composer Low Fix reported
Sylius has a DQL Injection via API Order FiltersCVE-2026-31825 · GHSA-XCWX-R2GW-W93M sylius/sylius Composer Medium Fix reported
Sylius has a Promotion Usage Limit Bypass via Race ConditionCVE-2026-31824 · GHSA-7MP4-25J8-HP5Q sylius/sylius Composer High Fix reported
Sylius Vulnerable to Authenticated Stored XSSCVE-2026-31823 · GHSA-MX4Q-XXC9-PF5Q sylius/sylius Composer Medium Fix reported
Sylius has a XSS vulnerability in checkout login formCVE-2026-31822 · GHSA-VGH8-C6FP-7GCG sylius/sylius Composer Medium Fix reported
Sylius has an Open Redirect via Referer HeaderCVE-2026-31819 · GHSA-9FFX-F77R-756W sylius/sylius Composer Medium Fix reported
Sylius affected by IDOR in Cart and Checkout LiveComponentsCVE-2026-31820 · GHSA-2XC6-348P-C2X6 sylius/sylius Composer High Fix reported
Sylius is Missing Authorization in API v2 Add Item EndpointCVE-2026-31821 · GHSA-WJMG-4CQ5-M8HG sylius/sylius Composer Medium Fix reported
Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin PanelCVE-2024-34349 · GHSA-V2F9-RV6W-VW8R sylius/sylius Composer Medium Fix reported
Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address BookCVE-2024-29376 · GHSA-7PRJ-9CCR-HR3Q sylius/sylius Composer Medium Fix reported
Sylius has a security vulnerability via adjustments API endpointCVE-2024-40633 · GHSA-55RF-8Q29-4G43 sylius/sylius Composer High Fix reported
Cross site scripting in sylius/syliusCVE-2021-3841 · GHSA-HHVR-2Q69-4563 sylius/sylius Composer Medium Fix reported
Sensitive Information Exposure in SyliusCVE-2022-24742 · GHSA-7563-75J9-6H5P sylius/sylius Composer Medium Fix reported
Ability to expose data in Sylius by using an unintended serialisation groupCVE-2020-5220 · GHSA-8VP7-J5CJ-VVM2Version ranges need review. sylius/resource-bundlesylius/sylius Composer Medium Fix reported