SQL Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd...

CLSA-2026-1789384929 TuxCare security update for cakephp/cakephp (1 CVE)

TuxCare rebuilt cakephp/cakephp to address 1 CVE. Fixed in 2.10.24-p3+tuxcare...