cakephp/database vulnerabilities (Packagist)

3 vulnerabilities.

• cakephp/database Packagist CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection CVE-2026-79752 Public exploitFix available 9.2 CriticalSeptember 17, 2026
• cakephp/database Packagist CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver CVE-2026-77635 Public exploitFix available 9.2 CriticalAugust 24, 2026
• cakephp/database Packagist Database Query::offset() and limit() vulnerable to SQL injection in cakephp CVE-2023-22727 Fix available 9.8 CriticalJanuary 17, 2023