cakephp/database vulnerabilities

1 known vulnerability in cakephp/database from Cakephp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.2 Critical severity

  cakephp: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-77635Aug 24, 2026Cakephp

  CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver is vulnerable to SQL injection when user-controlled data is supplied to the jsonP