Skip to content
OpenAdvisories

Package · Packagist

easycorp/easyadmin-bundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-2wwr-9x6f-88gp

    EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

    EasyAdminBundle ships two public Twig components — `<twig:ea:Flag countryCode="...">` and `<twig:ea:Icon name="...">` — that load SVG files from disk using a path built directly from a public component property, and then render the resulting markup with the T…

    easycorp/easyadmin-bundle Packagist