Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.4% on packagist.org
Top 0.4% downloads on packagist.org
Top 0.1% dependent packages on packagist.org
Top 0.3% dependent repos on packagist.org
Top 0.1% forks on packagist.org
Top 1.2% docker downloads on packagist.org

packagist.org : sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

Registry - Source - Homepage - JSON
purl: pkg:composer/sylius/sylius
Keywords: api, api-ecommerce, ecommerce, ecommerce-platform, framework, hacktoberfest, headless, headless-ecommerce, php, rest-api, restful-api, shop, shopping-cart, sylius, symfony, symfony-bundle
License: MIT
Latest release: 20 days ago
First release: almost 11 years ago
Namespace: sylius
Dependent packages: 498
Dependent repositories: 748
Downloads: 3,853,265 total
Stars: 7,674 on GitHub
Forks: 2,068 on GitHub
Docker dependents: 3
Docker downloads: 261
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sylius, https://github.com/sponsors/sylius, https://github.com/sponsors/Sylius
Last synced: 3 days ago

Moderate

GSA_kwCzR0hTQS1tdzgyLTZtMmctcWg2Y84AA7PU

Sylius Cross Site Scripting (XSS) vulnerability
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: 20 days ago

High

GSA_kwCzR0hTQS1tZjN2LWYycXEtcGY5Z80ylg

Insufficient Session Expiration in Sylius
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS00anAzLXEycW0tOWZtd80ykw

Improper Restriction of Rendered UI Layers or Frames in Sylius
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: about 2 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXByZzUtaGcyNS04Z3Jx

Ability to switch channels via GET parameter enabled in production environments
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJweGgtdmcyeC01MjZ2

List of order ids, number, items total and token value exposed for unauthorized uses via new API
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJjNXItNjk3Zi0yOHg2

XSS injection in the Grid component of Sylius
Ecosystems: packagist
Packages: sylius/sylius, sylius/grid-bundle, sylius/grid
Source: github
Published: about 4 years ago

Moderate

GSA_kwCzR0hTQS03NTYzLTc1ajktNmg1cM0ylQ

Sensitive Information Exposure in Sylius
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS03cHJqLTljY3ItaHIzcc4AA74Y

Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: 2 days ago

Low

GSA_kwCzR0hTQS12MmY5LXJ2Nnctdnc4cs4AA74X

Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: 2 days ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZndzQteDYzaC01NDk5

Ability to switch customer email address on account detail page and stay verified
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: over 3 years ago

Low

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNyOGotcG1jaC01ajJo

Internal exception message exposure for login action in Sylius
Ecosystems: packagist
Packages: sylius/sylius
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh2cDctajVjai12dm0y

Ability to expose data in Sylius by using an unintended serialisation group
Ecosystems: packagist
Packages: sylius/resource-bundle, sylius/sylius
Source: github
Published: over 4 years ago