{"action":"Upgrade easycorp/easyadmin-bundle to 4.29.10 or later.","affected":[{"fixed":"4.29.10","introduced":"4.0.0"},{"fixed":"5.0.10","introduced":"5.0.0"}],"component":"easycorp/easyadmin-bundle","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.29.10","5.0.10"],"ghsa_id":"GHSA-2wwr-9x6f-88gp","id":"tcs_01M5KESBD0D0P6J91S3YDYFX5W","modified_at":"2026-09-10T03:51:09.989937624Z","published_at":"2026-07-01T18:18:46Z","references":["https://osv.dev/vulnerability/GHSA-2wwr-9x6f-88gp","https://github.com/EasyCorp/EasyAdminBundle/security/advisories/GHSA-2wwr-9x6f-88gp","https://github.com/EasyCorp/EasyAdminBundle"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2wwr-9x6f-88gp","url":"https://osv.dev/vulnerability/GHSA-2wwr-9x6f-88gp"}],"summary":"EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components"}