Search for packages
| purl | pkg:composer/cakephp/cakephp@3.2.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2ggf-ncwr-tkea
Aliases: CVE-2019-11458 GHSA-qhrx-hcm6-pmrw |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
|
VCID-efhb-ed55-3fdy
Aliases: CVE-2020-15400 GHSA-j33j-fg2g-mcv2 |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-e42e-y1zv-4yem | Improper Input Validation The `clientIp` function in CakePHP allows remote attackers to spoof their IP via the `CLIENT-IP` HTTP header. |
CVE-2016-4793
GHSA-j8p3-8m69-2hqq |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-01T05:49:13.378639+00:00 | GitLab Importer | Affected by | VCID-efhb-ed55-3fdy | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2020-15400.yml | 38.6.0 |
| 2026-05-31T11:32:52.146655+00:00 | GithubOSV Importer | Fixing | VCID-e42e-y1zv-4yem | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-j8p3-8m69-2hqq/GHSA-j8p3-8m69-2hqq.json | 38.6.0 |
| 2026-05-31T10:01:03.212509+00:00 | GitLab Importer | Affected by | VCID-2ggf-ncwr-tkea | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2019-11458.yml | 38.6.0 |
| 2026-05-30T20:52:40.200377+00:00 | GitLab Importer | Fixing | VCID-e42e-y1zv-4yem | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/CVE-2016-4793.yml | 38.6.0 |