| Package | Affected versions | Patched versions |
|---|---|---|
| sylius/grid | ≥ 1.0.0, < 1.1.19≥ 1.2.0, < 1.2.18≥ 1.3.0, < 1.3.13≥ 1.4.0, < 1.4.5≥ 1.5.0, < 1.5.1 | 1.1.191.2.181.3.131.4.51.5.1 |
| sylius/grid-bundle | ≥ 1.0.0, < 1.1.19≥ 1.2.0, < 1.2.18≥ 1.3.0, < 1.3.13≥ 1.4.0, < 1.4.5≥ 1.5.0, < 1.5.1 | 1.1.191.2.181.3.131.4.51.5.1 |
| sylius/sylius | ≥ 1.0.0, < 1.1.18≥ 1.2.0, < 1.2.17≥ 1.3.0, < 1.3.12≥ 1.4.0, < 1.4.4 | 1.1.181.2.171.3.121.4.4 |
| grid | = 1.5.0≥ 1.0.0, ≤ 1.0.18≥ 1.1.0, ≤ 1.1.18≥ 1.2.0, ≤ 1.2.17≥ 1.3.0, ≤ 1.3.12≥ 1.4.0, ≤ 1.4.4 | |
| sylius | ≥ 1.0.0, ≤ 1.0.18≥ 1.1.0, ≤ 1.1.17≥ 1.2.0, ≤ 1.2.16≥ 1.3.0, ≤ 1.3.11≥ 1.4.0, ≤ 1.4.3 |
Grid component of Sylius omits HTML input sanitisation while rendering object implementing __toString() method through the string field type.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free