{"action":"Upgrade easycorp/easyadmin-bundle to 5.0.13 or later.","affected":[{"fixed":"5.0.13","introduced":"5.0.0"}],"component":"easycorp/easyadmin-bundle","cve_ids":["CVE-2026-54087"],"ecosystem":"Packagist","epss":0.00404,"exploited":false,"fixed_versions":["5.0.13"],"ghsa_id":"GHSA-8559-gwj3-q37r","id":"tcs_01M5KEYNQ4Y8J0VH74HPWWAH3J","modified_at":"2026-07-14T20:11:43.955519Z","published_at":"2026-07-14T19:51:34Z","references":["https://osv.dev/vulnerability/GHSA-8559-gwj3-q37r","https://github.com/EasyCorp/EasyAdminBundle/security/advisories/GHSA-8559-gwj3-q37r","https://github.com/EasyCorp/EasyAdminBundle/commit/8132b2b0ca3876c9261264fa267106a1b2c10a68","https://github.com/EasyCorp/EasyAdminBundle","https://github.com/EasyCorp/EasyAdminBundle/releases/tag/v5.0.13"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-8559-gwj3-q37r","url":"https://osv.dev/vulnerability/GHSA-8559-gwj3-q37r"}],"summary":"EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField"}