CVE-2020-15146.yaml

title: "CVE-2020-15146: Remote Code Execution in OptionsParser while using request parameters inside expression language"
link: https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-h6m7-j4h3-9rf5
cve: CVE-2020-15146
branches:
    1.0.x:
        time: ~
        versions: ['>=1.0.0', '<1.1.0']
    1.1.x:
        time: ~
        versions: ['>=1.1.0', '<1.2.0']
    1.2.x:
        time: ~
        versions: ['>=1.2.0', '<1.3.0']
    1.3.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.3.0', '<1.3.14']
    1.4.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.4.0', '<1.4.7']
    1.5.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.5.0', '<1.5.2']
    1.6.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.6.0', '<1.6.4']
reference: composer://sylius/resource-bundle