https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:35:57 +0000 https://cve.radiocsirt.org/vuln/cve-2020-5220 <p><strong>Affected:</strong> SyliusResourceBundle</p> <p>Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle&#39;s controller is affected. The vulnerable versions are: &lt;1.3 || &gt;=1.3.0 &lt;=1.3.12 || &gt;=1.4.0 &lt;=1.4.5 || &gt;=1.5.0 &lt;=1.5.0 || &gt;=1.6.0 &lt;=1.6.2. The patch is provided for Sylius ResourceBundle 1.3.13, 1.4.6, 1.5.1 and 1.6.3, but not for any versions below 1.3.</p> <p><strong>Affected:</strong> SyliusResourceBundle</p> <p>Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle&#39;s controller is affected. The vulnerable versions are: &lt;1.3 || &gt;=1.3.0 &lt;=1.3.12 || &gt;=1.4.0 &lt;=1.4.5 || &gt;=1.5.0 &lt;=1.5.0 || &gt;=1.6.0 &lt;=1.6.2. The patch is provided for Sylius ResourceBundle 1.3.13, 1.4.6, 1.5.1 and 1.6.3, but not for any versions below 1.3.</p> https://cve.radiocsirt.org/vuln/cve-2020-5220