Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/topthink/framework@5.1.25
purl pkg:composer/topthink/framework@5.1.25
Next non-vulnerable version 5.1.26
Latest non-vulnerable version 6.1.5
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-mr4n-bjum-u3bx
Aliases:
CVE-2018-18530
GHSA-7xfj-4jpg-58vf
ThinkPHP has SQL Injection via the `count` parameter because the `library/think/db/Query.php` aggregate function mishandles the aggregate variable.
5.1.26
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-1nv9-jqfx-yfay SQL Injection In ThinkPHP, the inner function delete can be used for SQL injection when its `WHERE` condition's value can be controlled by a user's request. CVE-2018-17566
GHSA-75fm-52mm-q5rm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:38:31.776894+00:00 GitLab Importer Affected by VCID-mr4n-bjum-u3bx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/topthink/framework/CVE-2018-18530.yml 38.6.0
2026-06-02T04:38:16.234215+00:00 GitLab Importer Fixing VCID-1nv9-jqfx-yfay https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/topthink/framework/CVE-2018-17566.yml 38.6.0