UpHeron
All vulnerabilities

Servers and applications

GHSA-mw28-p745-4jrv

A disabled API stays reachable through a percent-encoded path

Severity
Medium 6.5
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.14.21, 2.1.17, 2.2.12, 2.3.2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SyliusServers and applications · github:sylius/sylius
  • From 1.9.6 up to 1.9.13
  • From 1.10.1 before 1.14.21
  • From 2.0.0 up to 2.0.18
  • From 2.1.0 before 2.1.17
  • From 2.2.0 before 2.2.12
  • From 2.3.0 before 2.3.2

References