Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/cakephp/cakephp@3.6.4
purl pkg:composer/cakephp/cakephp@3.6.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-4g8t-fgcp-9kht Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in cakephp/cakephp. GHSA-xwhj-pqcg-8rcr
GMS-2023-72
VCID-cw9h-7n15-qyhu Cross-site Scripting XSS in some development error pages. GMS-2018-50

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:43:49.865604+00:00 GitLab Importer Fixing VCID-4g8t-fgcp-9kht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/GMS-2023-72.yml 38.6.0
2026-06-02T04:37:42.564497+00:00 GitLab Importer Fixing VCID-cw9h-7n15-qyhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/cakephp/cakephp/GMS-2018-50.yml 38.6.0