Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/topthink/framework@5.1.25
purl pkg:composer/topthink/framework@5.1.25
Next non-vulnerable version 5.1.26
Latest non-vulnerable version 6.1.5
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-p2hv-nrxq-93bv
Aliases:
CVE-2018-18530
GHSA-7xfj-4jpg-58vf
ThinkPHP has SQL Injection via the `count` parameter because the `library/think/db/Query.php` aggregate function mishandles the aggregate variable.
5.1.26
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jcwz-xs69-3bb5 SQL Injection In ThinkPHP, the inner function delete can be used for SQL injection when its `WHERE` condition's value can be controlled by a user's request. CVE-2018-17566
GHSA-75fm-52mm-q5rm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T20:54:26.458324+00:00 GitLab Importer Affected by VCID-p2hv-nrxq-93bv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/topthink/framework/CVE-2018-18530.yml 38.6.0
2026-05-30T20:54:10.876989+00:00 GitLab Importer Fixing VCID-jcwz-xs69-3bb5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/topthink/framework/CVE-2018-17566.yml 38.6.0