CVE-2025-29788
1 advisory.
Packagist/sylius/paypal-plugin CVE-2025-29788: medium 6.5, EPSS 0.50%
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Action: Upgrade sylius/paypal-plugin to 1.6.1 or later.
composer require sylius/paypal-plugin:1.6.1composer require sylius/paypal-plugin:1.7.1composer require sylius/paypal-plugin:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.1 | - |
| 1.7.0 | 1.7.1 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.6.1 | 1.7.1 | 2.0.1 |
Sources
- osv: GHSA-pqq3-q84h-pj6x
- https://github.com/Sylius/PayPalPlugin/security/advisories/GHSA-pqq3-q84h-pj6x
- https://nvd.nist.gov/vuln/detail/CVE-2025-29788
- https://github.com/Sylius/PayPalPlugin/commit/31e71b0457e5d887a6c19f8cfabb8b16125ec406
- https://github.com/Sylius/PayPalPlugin/commit/8a81258f965b7860d4bccb52942e4c5b53e6774d
- https://github.com/Sylius/PayPalPlugin
- https://github.com/Sylius/PayPalPlugin/releases/tag/v1.6.1
- https://github.com/Sylius/PayPalPlugin/releases/tag/v1.7.1
- https://github.com/Sylius/PayPalPlugin/releases/tag/v2.0.1
CVE-2025-29788 · published · modified · JSON