[MEDIUM] Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

PKSA-x2v3-68xs-1jyr CVE-2025-29788 GHSA-pqq3-q84h-pj6x

Affected package: sylius/paypal-plugin

Affected version: >=2.0.0,<2.0.1|>=1.7.0,<1.7.1|<1.6.1

Reported by:
GitHub