cakephp/database Security Advisories (2)
-
[CRITICAL] CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
PKSA-xyyq-wf7k-89mv CVE-2026-77635 GHSA-fxf7-vhh8-7vpq
Affected version: >=5.1.0,<5.1.10|>=5.2.0,<5.2.15|>=5.3.0,<5.3.7
Reported by:
GitHub -
[CRITICAL] CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
PKSA-ms25-fq8h-fwpy CVE-2023-22727 GHSA-6g8q-qfpv-57wp
Affected version: >=4.4.0,<4.4.10|>=4.3.0,<4.3.11|>=4.2.0,<4.2.12
Reported by:
GitHub