{"action":"Upgrade cakephp/queue to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0.1.10"}],"component":"cakephp/queue","cve_ids":["CVE-2026-54713"],"ecosystem":"Packagist","epss":0.00461,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-r5pm-vrc5-3m73","id":"tcs_01M5KF7XJPA085CK02CJ3DJ2VK","modified_at":"2026-08-27T17:25:39.132650Z","published_at":"2026-08-27T17:03:56Z","references":["https://osv.dev/vulnerability/GHSA-r5pm-vrc5-3m73","https://github.com/cakephp/queue/security/advisories/GHSA-r5pm-vrc5-3m73","https://github.com/cakephp/queue/pull/188","https://github.com/cakephp/queue/commit/13890591e248acc8824becb24ba1939fa061bd34","https://github.com/cakephp/queue","https://github.com/cakephp/queue/releases/tag/2.3.1"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-r5pm-vrc5-3m73","url":"https://osv.dev/vulnerability/GHSA-r5pm-vrc5-3m73"}],"summary":"cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions"}