[MEDIUM] CakePHP: View::element() is missing a path containment check

PKSA-wx2k-k564-z67n CVE-2026-48820 GHSA-wpvj-hjcr-h3p2

Affected package: cakephp/cakephp

Affected version: <4.5.11|>=4.6.0,<4.6.4|>=5.0.0,<5.1.7|>=5.2.0,<5.2.13|>=5.3.0,<5.3.6

Reported by:
GitHub