CVE-2026-79752
2 advisories.
Packagist/cakephp/database CVE-2026-79752: critical
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
Action: Upgrade cakephp/database to 4.5.12 or later.
composer require cakephp/database:4.5.12composer require cakephp/database:4.6.5composer require cakephp/database:5.1.9composer require cakephp/database:5.2.14composer require cakephp/database:5.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 4.5.12 | - |
| 4.6.0 | 4.6.5 | - |
| 5.0.0 | 5.1.9 | - |
| 5.2.0 | 5.2.14 | - |
| 5.3.0 | 5.3.7 | - |
Fixed versions
| 4.5.12 | 4.6.5 | 5.1.9 | 5.2.14 | 5.3.7 |
Sources
- osv: GHSA-vjqc-q4mp-2rvf
- https://github.com/cakephp/cakephp/security/advisories/GHSA-vjqc-q4mp-2rvf
- https://nvd.nist.gov/vuln/detail/CVE-2026-79752
- https://github.com/cakephp/cakephp/pull/19528
- https://github.com/cakephp/cakephp/pull/19520
- https://github.com/cakephp/cakephp/commit/79e1d6bc6f3a50fa01805579076a02c77370c676
- https://github.com/cakephp/cakephp/commit/8699d6f38e25fe46fcc24f2b698809948e71ad7d
- https://github.com/cakephp/cakephp/commit/ab608711674ac662af7315c5cdf1e0fbe2000e45
- https://github.com/cakephp/cakephp/commit/4730e774bd3b9caa90d67af49e27a12033ec3c71
- https://github.com/cakephp/cakephp/commit/3f4d13ea4280067f3381ecf935a8bef5b7cdcc2e
- https://github.com/cakephp/cakephp/commit/3349584ca3a891afaff2dbc324d6b1c09fb880f0
- https://github.com/cakephp/cakephp/releases/tag/4.5.12
- https://github.com/cakephp/cakephp/releases/tag/4.6.5
- https://github.com/cakephp/cakephp/releases/tag/5.1.8
- https://github.com/cakephp/cakephp/releases/tag/5.1.9
- https://github.com/cakephp/cakephp/releases/tag/5.2.14
- https://github.com/cakephp/cakephp/releases/tag/5.3.7
- https://github.com/cakephp/cakephp
CVE-2026-79752 · published · modified · JSON
Packagist/cakephp/cakephp CVE-2026-79752: critical
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
Action: Upgrade cakephp/cakephp to 4.5.12 or later.
composer require cakephp/cakephp:4.5.12composer require cakephp/cakephp:4.6.5composer require cakephp/cakephp:5.1.9composer require cakephp/cakephp:5.2.14composer require cakephp/cakephp:5.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.12 | - |
| 4.6.0 | 4.6.5 | - |
| 5.0.0 | 5.1.9 | - |
| 5.2.0 | 5.2.14 | - |
| 5.3.0 | 5.3.7 | - |
Fixed versions
| 4.5.12 | 4.6.5 | 5.1.9 | 5.2.14 | 5.3.7 |
Sources
- osv: GHSA-vjqc-q4mp-2rvf#Packagist/cakephp/cakephp
- https://github.com/cakephp/cakephp/security/advisories/GHSA-vjqc-q4mp-2rvf
- https://nvd.nist.gov/vuln/detail/CVE-2026-79752
- https://github.com/cakephp/cakephp/pull/19528
- https://github.com/cakephp/cakephp/pull/19520
- https://github.com/cakephp/cakephp/commit/79e1d6bc6f3a50fa01805579076a02c77370c676
- https://github.com/cakephp/cakephp/commit/8699d6f38e25fe46fcc24f2b698809948e71ad7d
- https://github.com/cakephp/cakephp/commit/ab608711674ac662af7315c5cdf1e0fbe2000e45
- https://github.com/cakephp/cakephp/commit/4730e774bd3b9caa90d67af49e27a12033ec3c71
- https://github.com/cakephp/cakephp/commit/3f4d13ea4280067f3381ecf935a8bef5b7cdcc2e
- https://github.com/cakephp/cakephp/commit/3349584ca3a891afaff2dbc324d6b1c09fb880f0
- https://github.com/cakephp/cakephp/releases/tag/4.5.12
- https://github.com/cakephp/cakephp/releases/tag/4.6.5
- https://github.com/cakephp/cakephp/releases/tag/5.1.8
- https://github.com/cakephp/cakephp/releases/tag/5.1.9
- https://github.com/cakephp/cakephp/releases/tag/5.2.14
- https://github.com/cakephp/cakephp/releases/tag/5.3.7
- https://github.com/cakephp/cakephp
CVE-2026-79752 · published · modified · JSON