cakephp/database Security Advisories for 5.2.8 (2)
-
[CRITICAL] CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
PKSA-ny8z-1rqf-8z42 CVE-2026-79752 GHSA-vjqc-q4mp-2rvf
Affected version: >=5.3.0,<5.3.7|>=5.2.0,<5.2.14|>=5.0.0,<5.1.9|>=4.6.0,<4.6.5|<4.5.12
Reported by:
GitHub -
[CRITICAL] CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
PKSA-xyyq-wf7k-89mv CVE-2026-77635 GHSA-fxf7-vhh8-7vpq
Affected version: >=5.1.0,<5.1.10|>=5.2.0,<5.2.15|>=5.3.0,<5.3.7
Reported by:
GitHub