[MEDIUM] CakePHP Authentication: Open redirect weakness via backslash bypass

PKSA-bz6x-t8z8-r26p CVE-2026-55590 GHSA-hhpq-7wg4-36jm

Affected package: cakephp/authentication

Affected version: >=4.0.0,<4.1.1|<3.3.6

Reported by:
GitHub