[HIGH] Unsafe deserialization in SmtpTransport

PKSA-yzfm-z92t-1mxd CVE-2019-11458 GHSA-qhrx-hcm6-pmrw

Affected package: cakephp/cakephp

Affected version: >=3.0.0,<3.5.18|>=3.6.0,<3.6.15|>=3.7.0,<3.7.7

Reported by:
FriendsOfPHP/security-advisories, GitHub