{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.4"}],"component":"topthink/framework","cve_ids":["CVE-2018-18529"],"ecosystem":"Packagist","epss":0.01202,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-78q9-24gv-g288","id":"tcs_01M5KEXVH24ZME45D92CFHTNEM","modified_at":"2023-11-08T04:00:05.609675Z","published_at":"2022-05-14T01:53:42Z","references":["https://osv.dev/vulnerability/GHSA-78q9-24gv-g288","https://nvd.nist.gov/vuln/detail/CVE-2018-18529","https://www.kingkk.com/2018/10/Thinkphp-%E8%81%9A%E5%90%88%E6%9F%A5%E8%AF%A2%E6%BC%8F%E6%B4%9E/#ThinkPHP3-lt-3-2-4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-78q9-24gv-g288","url":"https://osv.dev/vulnerability/GHSA-78q9-24gv-g288"}],"summary":"ThinkPHP SQLi Vulnerability"}