cakephp/database Security Advisories for 5.2.0 (1)
-
[CRITICAL] CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
PKSA-xyyq-wf7k-89mv CVE-2026-77635 GHSA-fxf7-vhh8-7vpq
Affected version: >=5.1.0,<5.1.10|>=5.2.0,<5.2.15|>=5.3.0,<5.3.7
Reported by:
GitHub