{"action":"Upgrade sylius/sylius to 1.9.12 or later.","affected":[{"fixed":"1.12.19","introduced":"1.12.0-alpha.1"},{"fixed":"1.13.4","introduced":"1.13.0-alpha.1"},{"fixed":"1.9.12","introduced":"0"},{"fixed":"1.10.16","introduced":"1.10.0-alpha.1"},{"fixed":"1.11.17","introduced":"1.11.0-alpha.1"}],"component":"sylius/sylius","cve_ids":["CVE-2024-40633"],"ecosystem":"Packagist","epss":0.0038,"exploited":false,"fixed_versions":["1.12.19","1.13.4","1.9.12","1.10.16","1.11.17"],"ghsa_id":"GHSA-55rf-8q29-4g43","id":"tcs_01M5KEVN454CYA1MZR2E89G29N","modified_at":"2026-03-09T16:01:31.134230Z","published_at":"2024-07-17T14:32:18Z","references":["https://osv.dev/vulnerability/GHSA-55rf-8q29-4g43","https://github.com/Sylius/Sylius/security/advisories/GHSA-55rf-8q29-4g43","https://nvd.nist.gov/vuln/detail/CVE-2024-40633","https://github.com/Sylius/Sylius/commit/d833b2871caa3b8d1f0a8207378bb778f0b90464","https://github.com/Sylius/Sylius"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-55rf-8q29-4g43","url":"https://osv.dev/vulnerability/GHSA-55rf-8q29-4g43"}],"summary":"Sylius has a security vulnerability via adjustments API endpoint"}