CVE-2026-54614
1 advisory.
Packagist/cakephp/debug_kit CVE-2026-54614: medium 4.3, EPSS 0.54%
cakephp/debug_kit: MailPreview contains unsafe reflection
Action: Upgrade cakephp/debug_kit to 4.10.3 or later.
composer require cakephp/debug_kit:4.10.3composer require cakephp/debug_kit:5.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.3 | - |
| 5.0.0 | 5.2.4 | - |
Fixed versions
| 4.10.3 | 5.2.4 |
Sources
- osv: GHSA-p46m-g734-vpc4
- https://github.com/cakephp/debug_kit/security/advisories/GHSA-p46m-g734-vpc4
- https://github.com/cakephp/debug_kit/pull/1078
- https://github.com/cakephp/debug_kit/commit/7c4d85e984c2334b0f50cd02578a927ff9649e13
- https://github.com/cakephp/debug_kit/commit/c8a2a9e07d56a5e212d95f6947f370f3b5e6eed6
- https://github.com/cakephp/debug_kit
- https://github.com/cakephp/debug_kit/releases/tag/4.10.3
- https://github.com/cakephp/debug_kit/releases/tag/5.2.4
CVE-2026-54614 · published · modified · JSON