VulertSecurity VulertSecurity

Vulnerability Database · Packagist · topthink/framework · Version

topthink/framework v5.0.20

v5.0.20 is affected by 17 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 14 High 3 Medium 0 Low 0 Unrated 0

All topthink/framework versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

topthink/framework v5.0.20 vulnerabilities

17 vulnerabilities cover topthink/framework v5.0.20. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2022-47945: ThinkPHP Framework Remote Code Execution 9.8 critical 6.0.14 23 Dec 2022
CVE-2022-38352: ThinkPHP deserialization vulnerability 9.8 critical No fix published 16 Sep 2022
CVE-2022-33107: Deserialization of Untrusted Data in topthink/framework 9.8 critical No fix published 30 Jun 2022
CVE-2018-10225: thinkphp SQL Injection via the index.php s parameter 9.8 critical No fix published 14 May 2022
CVE-2018-16385: ThinkPHP SQL Injection vulnerability 9.8 critical 5.1.23 14 May 2022
CVE-2018-17566: ThinkPHP SQL injection vulnerability 9.8 critical No fix published 14 May 2022
CVE-2018-18530: ThinkPHP SQLi Vulnerability 9.8 critical No fix published 14 May 2022
CVE-2018-18529: ThinkPHP SQLi Vulnerability 9.8 critical No fix published 14 May 2022
CVE-2018-18546: ThinkPHP SQLi Vulnerability 9.8 critical No fix published 14 May 2022
CVE-2021-23592: Deserialization of Untrusted Data in topthink/framework 9.8 critical 6.0.12 07 May 2022
CVE-2021-44350: ThinkPHP5 SQL Injection vulnerability 9.8 critical No fix published 17 Dec 2021
CVE-2021-36564: Deserialization of Untrusted Data in topthink/framework 9.8 critical 6.0.9 10 Dec 2021
CVE-2021-36567: Deserialization of Untrusted Data in topthink/framework 9.8 critical No fix published 07 Dec 2021
CVE-2025-50706: ThinkPHP Framework Path Traversal Vulnerability 9.3 critical No fix published 05 Aug 2025
CVE-2022-44289: Thinkphp - Code Logic Error in File Upload 8.8 high No fix published 06 Dec 2022
CVE-2021-44892: ThinkPHP Remote Code Execution (RCE) vulnerability 8.8 high No fix published 11 Feb 2022
CVE-2022-25481: Exposure of Resource to Wrong Sphere in ThinkPHP Framework 7.5 high No fix published 22 Mar 2022

Looking for another version, or everything Vulert holds for topthink/framework?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About topthink/framework v5.0.20

Is topthink/framework v5.0.20 vulnerable?

Yes. 17 vulnerabilities in the Vulert database cover topthink/framework v5.0.20: 14 critical, 3 high, 0 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor topthink/framework for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the topthink/framework version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.