Filtered by vendor Cakephp
Subscriptions
Filtered by product Cakephp/database
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-77635 | 1 Cakephp | 2 Cakephp, Cakephp/database | 2026-08-28 | N/A |
| CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver is vulnerable to SQL injection when user-controlled data is supplied to the jsonPath parameter. This issue is fixed in versions 5.1.10, 5.2.15, and 5.3.7. | ||||
Page 1 of 1.