All vulnerabilities

Servers and applications

GHSA-5mpg-w6q2-2vrw

Unpublished product reviews disclosed through the Shop API item endpoint

Severity
Medium 5.3
Published
22 Oct 2026
Last changed
23 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.14.21, 2.1.17, 2.2.12, 2.3.2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SyliusServers and applications · github:sylius/sylius
  • From 1.9.0 before 1.14.21
  • From 2.0.0 up to 2.0.18
  • From 2.1.0 before 2.1.17
  • From 2.2.0 before 2.2.12
  • From 2.3.0 before 2.3.2

References