CVE-2021-23592: ThinkPHP

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.

Affected products

• ThinkPHP ThinkPHP: before 6.0.12 (fixed in 6.0.12)

Published 2022-05-06. Last modified 2026-06-17.