{"action":"Upgrade cakephp to 1.1.13.4450-1 or later.","affected":[{"fixed":"1.1.13.4450-1","introduced":"0"}],"component":"cakephp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["1.1.13.4450-1"],"id":"tcs_01M5N8P6KSK1MQY7D0EPV1C32Q","modified_at":"2026-08-27T12:47:32.813578970Z","published_at":"2006-09-27T23:07:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-5031","https://security-tracker.debian.org/tracker/CVE-2006-5031"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-5031","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-5031"}],"summary":"Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file par"}