sylius
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 21, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header
Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API
Sylius has a DQL Injection via API Order Filters
Sylius has a Promotion Usage Limit Bypass via Race Condition
Sylius has Authenticated Stored XSS
Sylius has a XSS vulnerability in checkout login form
Sylius is Missing Authorization in API v2 Add Item Endpoint
Sylius affected by IDOR in Cart and Checkout LiveComponents
Monitor sylius in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.