Description
The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | topthink/framework | unspecified – < 6.0.12 | 6.0.12 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | topthink/framework | < 6.0.12 | 6.0.12 | GHSA-3fpv-54ff-wqfj |