[HIGH] CVE-2020-15143: Remote Code Execution in ParametersParser while using request parameters inside expression language

PKSA-g5n4-6393-snd5 CVE-2020-15143 GHSA-p4pj-9g59-4ppv

Affected package: sylius/resource-bundle

Affected version: >=1.0.0,<1.1.0|>=1.1.0,<1.2.0|>=1.2.0,<1.3.0|>=1.3.0,<1.3.14|>=1.4.0,<1.4.7|>=1.5.0,<1.5.2|>=1.6.0,<1.6.4

Reported by:
GitHub, FriendsOfPHP/security-advisories