cakephp/database vulnerabilities

CVEs whose affected-version data names the cakephp/database package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77635CriticalPoC

4w ago

CakePHP is a rapid development framework for PHP

CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver is vulnerable to SQL injection when user-controlled data i…

▾ Abyssalcakephp · cakephp/cakephpEPSS 0.29%via NVD