Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-63889
7.5
HIGHCVSS v3
Published
November 20, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.
GitHub