[CRITICAL] CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver

PKSA-xyyq-wf7k-89mv CVE-2026-77635 GHSA-fxf7-vhh8-7vpq

Affected version: >=5.1.0,<5.1.10|>=5.2.0,<5.2.15|>=5.3.0,<5.3.7

Reported by:
GitHub