Search for packages
| purl | pkg:composer/cakephp/cakephp@3.2.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3cx6-dpsf-xkhw
Aliases: CVE-2016-4793 GHSA-j8p3-8m69-2hqq |
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. |
Affected by 2 other vulnerabilities. |
|
VCID-74cw-ufme-5yfh
Aliases: CVE-2020-15400 GHSA-j33j-fg2g-mcv2 |
CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-9fz7-k62h-eydd
Aliases: CVE-2019-11458 GHSA-qhrx-hcm6-pmrw |
Unsafe deserialization in SmtpTransport in CakePHP |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T17:22:16.217819+00:00 | GitLab Importer | Affected by | VCID-74cw-ufme-5yfh | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2020-15400.yml | 38.6.0 |
| 2026-06-12T17:16:06.846512+00:00 | GitLab Importer | Affected by | VCID-9fz7-k62h-eydd | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2019-11458.yml | 38.6.0 |
| 2026-06-12T16:52:18.141655+00:00 | GitLab Importer | Affected by | VCID-3cx6-dpsf-xkhw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2016-4793.yml | 38.6.0 |