{"action":"Upgrade topthink/framework to 6.0.12 or later.","affected":[{"fixed":"6.0.12","introduced":"0"}],"component":"topthink/framework","cve_ids":["CVE-2021-23592"],"ecosystem":"Packagist","epss":0.01765,"exploited":false,"fixed_versions":["6.0.12"],"ghsa_id":"GHSA-3fpv-54ff-wqfj","id":"tcs_01M5KESYV4QM3FXCAWVD2GB1JE","modified_at":"2026-09-10T03:49:29.404809975Z","published_at":"2022-05-07T00:00:31Z","references":["https://osv.dev/vulnerability/GHSA-3fpv-54ff-wqfj","https://nvd.nist.gov/vuln/detail/CVE-2021-23592","https://github.com/top-think/framework/commit/d3b5aeae94bc71bae97977d05cd12c3e0550905c","https://github.com/top-think/framework","https://github.com/top-think/framework/releases/tag/v6.0.12","https://snyk.io/vuln/SNYK-PHP-TOPTHINKFRAMEWORK-2385695"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-3fpv-54ff-wqfj","url":"https://osv.dev/vulnerability/GHSA-3fpv-54ff-wqfj"}],"summary":"Deserialization of Untrusted Data in topthink/framework"}