{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.4"}],"component":"topthink/framework","cve_ids":["CVE-2018-18546"],"ecosystem":"Packagist","epss":0.01659,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j7g8-3qqg-8cvm","id":"tcs_01M5KF4BS21FSA38R2TKRP7W0W","modified_at":"2023-11-08T04:00:05.791246Z","published_at":"2022-05-14T01:53:16Z","references":["https://osv.dev/vulnerability/GHSA-j7g8-3qqg-8cvm","https://nvd.nist.gov/vuln/detail/CVE-2018-18546","https://github.com/top-think/framework/issues/2613","https://github.com/top-think/thinkphp/commit/9748cb80d2f24c89218f358ca2f5ab88ee33396f","https://98587329.github.io/2018/10/09/thinkphp%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j7g8-3qqg-8cvm","url":"https://osv.dev/vulnerability/GHSA-j7g8-3qqg-8cvm"}],"summary":"ThinkPHP SQLi Vulnerability"}