High severity7.7NVD Advisory· Published May 6, 2022· Updated Jun 17, 2026

CVE-2021-23592

Description

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
topthink/frameworkPackagist	< 6.0.12	6.0.12

Affected products

Thinkphp/Thinkphp
cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*
Range: <6.0.12
topthink/frameworkdescription
ghsa-coords
pkg:composer/topthink/framework
Range: < 6.0.12

Patches

Vulnerability mechanics

References

github.com/top-think/framework/commit/d3b5aeae94bc71bae97977d05cd12c3e0550905cnvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-3fpv-54ff-wqfjghsaADVISORY
github.com/top-think/framework/releases/tag/v6.0.12nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-23592ghsaADVISORY
snyk.io/vuln/SNYK-PHP-TOPTHINKFRAMEWORK-2385695nvdThird Party AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000