{"action":"Upgrade cakephp/debug_kit to 4.10.3 or later.","affected":[{"fixed":"4.10.3","introduced":"0"},{"fixed":"5.2.4","introduced":"5.0.0"}],"component":"cakephp/debug_kit","cve_ids":["CVE-2026-54614"],"ecosystem":"Packagist","epss":0.00536,"exploited":false,"fixed_versions":["4.10.3","5.2.4"],"ghsa_id":"GHSA-p46m-g734-vpc4","id":"tcs_01M5KF60M20SGR7RB0WJ8J4R5W","modified_at":"2026-08-26T15:56:18.384574Z","published_at":"2026-08-26T15:31:01Z","references":["https://osv.dev/vulnerability/GHSA-p46m-g734-vpc4","https://github.com/cakephp/debug_kit/security/advisories/GHSA-p46m-g734-vpc4","https://github.com/cakephp/debug_kit/pull/1078","https://github.com/cakephp/debug_kit/commit/7c4d85e984c2334b0f50cd02578a927ff9649e13","https://github.com/cakephp/debug_kit/commit/c8a2a9e07d56a5e212d95f6947f370f3b5e6eed6","https://github.com/cakephp/debug_kit","https://github.com/cakephp/debug_kit/releases/tag/4.10.3","https://github.com/cakephp/debug_kit/releases/tag/5.2.4"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-p46m-g734-vpc4","url":"https://osv.dev/vulnerability/GHSA-p46m-g734-vpc4"}],"summary":"cakephp/debug_kit: MailPreview contains unsafe reflection"}