cakephp vulnerabilities (Debian)

12 vulnerabilities.

• cakephp Debian CakePHP: Potential Authentication bypass with CookieAuthenticator CVE-2026-77337 9.1 CriticalAugust 24, 2026
• cakephp Debian CakePHP: SmtpTransport vulnerable to CRLF header injection CVE-2026-77634 Fix available 8.2 HighAugust 24, 2026
• cakephp Debian CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver CVE-2026-77635 Public exploitFix available 9.2 CriticalAugust 24, 2026
• cakephp Debian CakePHP: View::element() is missing a path containment check CVE-2026-48820 Fix available 6.3 MediumJune 17, 2026
• cakephp Debian Cross-Site Request Forgery in CakePHP CVE-2020-15400 Fix available 4.3 MediumJune 30, 2020
• cakephp Debian CakePHP allows remote attackers to spoof their IP CVE-2016-4793 Public exploitFix available 7.5 HighJanuary 23, 2017
• cakephp Debian cakephp - security update DLA-566-1 Fix available No scoreJuly 28, 2016
• cakephp Debian CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter CVE-2015-8379 Fix available 8.8 HighJanuary 26, 2016
• cakephp Debian cakephp - security update DLA-333-1 Fix available No scoreOctober 23, 2015
• cakephp Debian CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code CVE-2010-4335 Public exploitFix available EPSS 55.2% 7.5 HighJanuary 14, 2011
• cakephp Debian CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files CVE-2006-5031 Public exploitFix available 5.0 MediumSeptember 27, 2006
• cakephp Debian Cross-site scripting (XSS) vulnerability in CakePHP CVE-2006-4067 Fix available 4.3 MediumAugust 10, 2006