[CRITICAL] CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

PKSA-vxgj-bmcq-9b6x CVE-2026-79752 GHSA-vjqc-q4mp-2rvf

Affected package: cakephp/cakephp

Affected version: >=5.3.0,<5.3.7|>=5.2.0,<5.2.14|>=5.0.0,<5.1.9|>=4.6.0,<4.6.5|<4.5.12

Reported by:
GitHub