CRITICAL9.8
GHSA-f4wh-359g-4pq7
ThinkPHP deserialization vulnerability
Details
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/topthink/framework
Introduced in:
6.1.3No fixed version published yet for topthink/framework (composer). Pin to a known-safe version or switch to an alternative.