{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"5.0","last_affected":"5.1.22"}],"component":"topthink/framework","cve_ids":["CVE-2021-44350"],"ecosystem":"Packagist","epss":0.01419,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q868-c4vw-qjx3","id":"tcs_01M5KF735PVFGKWD9EPYNZW0FS","modified_at":"2024-04-24T23:28:21.763171Z","published_at":"2021-12-17T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-q868-c4vw-qjx3","https://nvd.nist.gov/vuln/detail/CVE-2021-44350","https://github.com/top-think/framework/issues/2613","https://github.com/top-think/framework"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q868-c4vw-qjx3","url":"https://osv.dev/vulnerability/GHSA-q868-c4vw-qjx3"}],"summary":"ThinkPHP5 SQL Injection vulnerability"}