Security Advisories - cakephp/cakephp - Packagist

cakephp/cakephp Security Advisories for 3.5.3 (3)

Cross-Site Request Forgery in CakePHP

CVE-2020-15400

Affected version: <3.10.3|>=4.0.0,<4.0.6

Reported by:
GitHub
Unsafe deserialization in SmtpTransport

CVE-2019-11458

Affected version: >=3.0.0,<3.5.18|>=3.6.0,<3.6.15|>=3.7.0,<3.7.7

Reported by:
FriendsOfPHP/security-advisories, GitHub
XSS in some development error pages

Affected version: >=3.4.0,<3.4.14|>=3.5.0,<3.5.17|>=3.6.0,<3.6.4

Reported by:
FriendsOfPHP/security-advisories, GitHub