{"action":"Upgrade sylius/grid to 1.1.19 or later.","affected":[{"fixed":"1.1.19","introduced":"1.0.0"},{"fixed":"1.2.18","introduced":"1.2.0"},{"fixed":"1.3.13","introduced":"1.3.0"},{"fixed":"1.4.5","introduced":"1.4.0"},{"fixed":"1.5.1","introduced":"1.5.0"}],"component":"sylius/grid","cve_ids":["CVE-2019-12186"],"ecosystem":"Packagist","epss":0.00552,"exploited":false,"fixed_versions":["1.1.19","1.2.18","1.3.13","1.4.5","1.5.1"],"ghsa_id":"GHSA-rc5r-697f-28x6","id":"tcs_01M5KF84ZBHSYFRVGY3C15TH05","modified_at":"2026-09-10T03:48:43.977470331Z","published_at":"2020-04-15T21:07:59Z","references":["https://osv.dev/vulnerability/GHSA-rc5r-697f-28x6","https://nvd.nist.gov/vuln/detail/CVE-2019-12186","https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/grid/CVE-2019-12186.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/sylius/CVE-2019-12186.yaml","https://sylius.com/blog/cve-2019-12186"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rc5r-697f-28x6","url":"https://osv.dev/vulnerability/GHSA-rc5r-697f-28x6"}],"summary":"XSS injection in the Grid component of Sylius"}