[MEDIUM] Denial of Service attack through XML payloads

PKSA-xk7x-9sn9-kdzr GHSA-p76f-wr22-4rv6

Affected package: cakephp/cakephp

Affected version: >=3.0.0,<3.0.6|>=2.0.0,<2.0.99|>=2.1.0,<2.1.99|>=2.2.0,<2.2.99|>=2.3.0,<2.3.99|>=2.4.0,<2.4.99|>=2.5.0,<2.5.90|>=2.6.0,<2.6.6

Reported by:
FriendsOfPHP/security-advisories, GitHub