Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/sylius/resource-bundle@1.2.2
purl pkg:composer/sylius/resource-bundle@1.2.2
Next non-vulnerable version 1.3.13
Latest non-vulnerable version 1.6.4
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vgvf-jvkc-vbdx
Aliases:
CVE-2020-5220
GHSA-8vp7-j5cj-vvm2
1.3.13
Affected by 0 other vulnerabilities.
1.4.6
Affected by 0 other vulnerabilities.
1.5.1
Affected by 0 other vulnerabilities.
1.6.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9rtt-typv-5ya8 Sylius Resource Bundle Cross-Site Request Forgery vulnerability GHSA-65v7-wg35-2qpm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T10:50:38.713199+00:00 GithubOSV Importer Fixing VCID-9rtt-typv-5ya8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-65v7-wg35-2qpm/GHSA-65v7-wg35-2qpm.json 38.6.0
2026-05-31T10:02:10.394165+00:00 GitLab Importer Affected by VCID-vgvf-jvkc-vbdx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/sylius/resource-bundle/CVE-2020-5220.yml 38.6.0
2026-05-31T01:03:31.691431+00:00 GHSA Importer Fixing VCID-9rtt-typv-5ya8 https://github.com/advisories/GHSA-65v7-wg35-2qpm 38.6.0