~ / search / GHSA-33gc-6cw9-w3g4

GHSA-33gc-6cw9-w3g4

Deserialization of Untrusted Data in topthink/framework

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-36564

Packages

EcosystemPackageAffectedFixed in
Packagist topthink/framework < 6.0.9 6.0.9

Details

As written in the advisory (Markdown source, shown as plain text).

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php.

References

External links from the advisory. They lead to third-party sites.