Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/sylius/resource-bundle@1.0.17
purl pkg:composer/sylius/resource-bundle@1.0.17
Next non-vulnerable version 1.3.14
Latest non-vulnerable version 1.6.4
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vgvf-jvkc-vbdx
Aliases:
CVE-2020-5220
GHSA-8vp7-j5cj-vvm2
1.3.13
Affected by 2 other vulnerabilities.
1.4.6
Affected by 2 other vulnerabilities.
1.5.1
Affected by 2 other vulnerabilities.
1.6.3
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9rtt-typv-5ya8 Sylius Resource Bundle Cross-Site Request Forgery vulnerability GHSA-65v7-wg35-2qpm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T19:18:43.337954+00:00 GitLab Importer Fixing VCID-9rtt-typv-5ya8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/sylius/resource-bundle/GHSA-65v7-wg35-2qpm.yml 38.6.0
2026-05-31T10:50:38.655379+00:00 GithubOSV Importer Fixing VCID-9rtt-typv-5ya8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-65v7-wg35-2qpm/GHSA-65v7-wg35-2qpm.json 38.6.0
2026-05-31T10:02:10.327358+00:00 GitLab Importer Affected by VCID-vgvf-jvkc-vbdx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/sylius/resource-bundle/CVE-2020-5220.yml 38.6.0
2026-05-31T01:03:31.758660+00:00 GHSA Importer Fixing VCID-9rtt-typv-5ya8 https://github.com/advisories/GHSA-65v7-wg35-2qpm 38.6.0