Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires sylius/sylius ^1.12 -> satisfiable by sylius/sylius[v1.12.19, ..., v1.14.12]. - sylius/sylius v1.12.19 requires api-platform/core ^2.6 -> found api-platform/core[v2.6.0, ..., v2.7.18] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-gs8r-6kz6-pp56", "PKSA-gnn4-pxdg-q76m") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. - sylius/sylius[v1.13.4, ..., v1.14.12] require api-platform/core ^2.7.10 -> found api-platform/core[v2.7.10, ..., v2.7.18] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-gs8r-6kz6-pp56", "PKSA-gnn4-pxdg-q76m") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.