CVE-2026-54713
1 advisory.
Packagist/cakephp/queue CVE-2026-54713: low 3.7, EPSS 0.46%
cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions
Action: Upgrade cakephp/queue to 2.3.1 or later.
composer require cakephp/queue:2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.10 | 2.3.1 | - |
Fixed versions
| 2.3.1 |
Sources
- osv: GHSA-r5pm-vrc5-3m73
- https://github.com/cakephp/queue/security/advisories/GHSA-r5pm-vrc5-3m73
- https://github.com/cakephp/queue/pull/188
- https://github.com/cakephp/queue/commit/13890591e248acc8824becb24ba1939fa061bd34
- https://github.com/cakephp/queue
- https://github.com/cakephp/queue/releases/tag/2.3.1
CVE-2026-54713 · published · modified · JSON