VulnerableCode Package Details - pkg:composer/cakephp/cakephp@3.4.1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/cakephp/cakephp@3.4.1

Essentials
History (3)

purl	pkg:composer/cakephp/cakephp@3.4.1

Next non-vulnerable version	3.10.3
Latest non-vulnerable version	5.3.1
Risk	4.0

Vulnerabilities affecting this package (3)

Vulnerability	Summary	Fixed by
VCID-18rn-zksv-h3e3 Aliases: GMS-2018-50	Cross-site Scripting XSS in some development error pages.	3.4.14 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 3.5.0-RC1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 3.5.17 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 3.6.0-RC1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.6.4 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-2ggf-ncwr-tkea Aliases: CVE-2019-11458 GHSA-qhrx-hcm6-pmrw		3.5.18 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.6.15 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.7.7 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-efhb-ed55-3fdy Aliases: CVE-2020-15400 GHSA-j33j-fg2g-mcv2		3.10.3 Affected by 0 other vulnerabilities. 4.0.6 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-18rn-zksv-h3e3
Aliases:
GMS-2018-50

Cross-site Scripting XSS in some development error pages.

3.4.14
Affected by 2 other vulnerabilities.

3.5.0-RC1
Affected by 2 other vulnerabilities.

3.5.17
Affected by 2 other vulnerabilities.

3.6.0-RC1
Affected by 1 other vulnerability.

3.6.4
Affected by 2 other vulnerabilities.

VCID-2ggf-ncwr-tkea
Aliases:
CVE-2019-11458
GHSA-qhrx-hcm6-pmrw

3.5.18
Affected by 1 other vulnerability.

3.6.15
Affected by 1 other vulnerability.

3.7.7
Affected by 1 other vulnerability.

VCID-efhb-ed55-3fdy
Aliases:
CVE-2020-15400
GHSA-j33j-fg2g-mcv2

3.10.3
Affected by 0 other vulnerabilities.

4.0.6
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-01T05:49:13.559127+00:00	GitLab Importer	Affected by	VCID-efhb-ed55-3fdy	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2020-15400.yml	38.6.0
2026-05-31T10:01:03.329453+00:00	GitLab Importer	Affected by	VCID-2ggf-ncwr-tkea	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2019-11458.yml	38.6.0
2026-05-31T09:44:38.384873+00:00	GitLab Importer	Affected by	VCID-18rn-zksv-h3e3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/GMS-2018-50.yml	38.6.0