[MEDIUM] CakePHP Authentication: Open redirect weakness via backslash bypass

PKSA-bz6x-t8z8-r26p CVE-2026-55590 GHSA-hhpq-7wg4-36jm

Affected version: <2.11.1|>=3.0.0,<3.3.6|>=4.0.0,<4.1.1

Reported by:
GitHub