`cakephp/cakephp`

Ecosystem:
packagist

Package URL:
pkg:composer/cakephp/cakephp

Total PRs:
335 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
83 repositories

Unique Repos (30 days):
2 repositories

Security Advisories

Unsafe deserialization in SmtpTransport in CakePHP

GHSA-qhrx-hcm6-pmrw CVE-2019-11458 HIGH published about 6 years ago • updated 20 days ago

An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file over...

CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter

GHSA-556q-h4vr-pgh2 CVE-2015-8379 HIGH published over 3 years ago • updated 7 days ago

CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the `_method` parameter.

CakePHP allows remote attackers to spoof their IP

GHSA-j8p3-8m69-2hqq CVE-2016-4793 HIGH published over 3 years ago • updated 6 days ago

The `clientIp` function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the `CLIENT-IP HTTP` header.

CakePHP SecurityComponent cross form submission issue

GHSA-j9q2-f9q7-jhgq MODERATE published almost 3 years ago • updated 2 days ago

Prior to versions 2.4.8 and 1.3.18, forms secured by SecurityComponent could be submitted to any action without triggering SecurityComponent’s tamp...

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file

GHSA-r7p6-fr3x-r877 CVE-2011-3712 MODERATE published over 3 years ago • updated about 2 months ago

CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a `.php` file, which reveals the installation path in...

View all 17 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump cakephp/cakephp from 5.2.9 to 5.2.10

matthewdeaves/willow #148

5.2.9 → 5.2.10 Patch PR

Closed about 1 month ago 2 comments

Bump cakephp/cakephp from 5.2.6 to 5.2.9

pbachviet/project-3047-cakephp #4

5.2.6 → 5.2.9 Patch PR

Closed about 2 months ago 1 comment

Bump cakephp/cakephp from 5.2.7 to 5.2.9

FlaviaSilva65/be_2025 #22

5.2.7 → 5.2.9 Patch PR

Closed 3 months ago 1 comment

Bump cakephp/cakephp from 5.2.8 to 5.2.9

digilopment/rshop #20

5.2.8 → 5.2.9 Patch PR

Closed 3 months ago 1 comment

Bump cakephp/cakephp from 5.2.5 to 5.2.9

danielafiq511/bloodsystem #17

5.2.5 → 5.2.9 Patch PR

Closed 3 months ago 1 comment

Bump cakephp/cakephp from 5.2.6 to 5.2.8

tonykkn4321/cakePHP-author-book-management-system #6

5.2.6 → 5.2.8 Patch PR

Open 3 months ago

Bump cakephp/cakephp from 5.2.3 to 5.2.8

LBDistrictScouts/EventBookingBackend #90

5.2.3 → 5.2.8 Patch PR

Open 3 months ago

Bump cakephp/cakephp from 5.2.7 to 5.2.8

FlaviaSilva65/be_2025 #15

5.2.7 → 5.2.8 Patch PR

Closed 3 months ago 1 comment

Bump cakephp/cakephp from 5.2.4 to 5.2.8

matthewdeaves/willow #126

5.2.4 → 5.2.8 Patch PR

Open 3 months ago

Bump cakephp/cakephp from 5.2.7 to 5.2.8

JesterMug/brewhub-web #4

5.2.7 → 5.2.8 Patch PR

Closed 3 months ago 1 comment

Bump cakephp/cakephp from 5.2.5 to 5.2.8

GilvanFe/Farmvet_back_teste #16

5.2.5 → 5.2.8 Patch PR

Open 3 months ago

build(deps): bump cakephp/cakephp from 5.2.7 to 5.2.8

josegonzalez/cakephp-htmx-demo #66

5.2.7 → 5.2.8 Patch PR

Merged 3 months ago

Bump cakephp/cakephp from 5.2.7 to 5.2.8

wawanabnan/cargochains_final #5

5.2.7 → 5.2.8 Patch PR

Open 3 months ago

Bump cakephp/cakephp from 5.2.5 to 5.2.8

danielafiq511/bloodsystem #12

5.2.5 → 5.2.8 Patch PR

Closed 4 months ago 1 comment

Bump cakephp/cakephp from 5.2.7 to 5.2.8

greisson182/7trader-cake5 #3

5.2.7 → 5.2.8 Patch PR

Open 4 months ago

Bump cakephp/cakephp from 5.2.5 to 5.2.7

danielafiq511/bloodbasesystem #6

5.2.5 → 5.2.7 Patch PR

Closed 4 months ago 1 comment

Bump cakephp/cakephp from 5.2.5 to 5.2.7

danielafiq511/bloodsystem #9

5.2.5 → 5.2.7 Patch PR

Closed 4 months ago 1 comment

Bump cakephp/cakephp from 5.2.6 to 5.2.7

tonykkn4321/cakePHP-author-book-management-system #2

5.2.6 → 5.2.7 Patch PR

Open 4 months ago

Bump cakephp/cakephp from 5.2.4 to 5.2.7

matthewdeaves/willow #116

5.2.4 → 5.2.7 Patch PR

Closed 4 months ago 1 comment

Bump cakephp/cakephp from 5.2.5 to 5.2.7

GilvanFe/Farmvet_back_teste #8

5.2.5 → 5.2.7 Patch PR

Closed 4 months ago 1 comment

build(deps): bump cakephp/cakephp from 5.2.6 to 5.2.7

josegonzalez/cakephp-htmx-demo #58

5.2.6 → 5.2.7 Patch PR

Open 4 months ago

Bump cakephp/cakephp from 5.2.5 to 5.2.6

GilvanFe/Farmvet_back_teste #5

5.2.5 → 5.2.6 Patch PR

Open 5 months ago

Bump cakephp/cakephp from 5.2.3 to 5.2.6

LBDistrictScouts/EventBookingBackend #66

5.2.3 → 5.2.6 Patch PR

Open 5 months ago

build(deps): bump cakephp/cakephp from 5.2.5 to 5.2.6

josegonzalez/cakephp-htmx-demo #50

5.2.5 → 5.2.6 Patch PR

Merged 5 months ago

Bump cakephp/cakephp from 5.2.5 to 5.2.6

danielafiq511/bloodbasesystem #1

5.2.5 → 5.2.6 Patch PR

Closed 5 months ago 1 comment

Bump cakephp/cakephp from 5.2.5 to 5.2.6

danielafiq511/bloodsystem #4

5.2.5 → 5.2.6 Patch PR

Closed 5 months ago 1 comment

Bump cakephp/cakephp from 5.2.3 to 5.2.5

LBDistrictScouts/EventBookingBackend #47

5.2.3 → 5.2.5 Patch PR

Closed 7 months ago 1 comment

Bump cakephp/cakephp from 5.2.4 to 5.2.5

matthewdeaves/willow #91

5.2.4 → 5.2.5 Patch PR

Open 7 months ago

build(deps): bump cakephp/cakephp from 5.2.4 to 5.2.5

josegonzalez/cakephp-htmx-demo #43

5.2.4 → 5.2.5 Patch PR

Merged 7 months ago

chore(deps): bump cakephp/cakephp from 5.2.4 to 5.2.5

arthusantiago/KeyAnyWhere #60

5.2.4 → 5.2.5 Patch PR

Closed 7 months ago 1 comment

build(deps): bump cakephp/cakephp from 5.2.3 to 5.2.4

josegonzalez/cakephp-htmx-demo #36

5.2.3 → 5.2.4 Patch PR

Merged 8 months ago

Bump cakephp/cakephp from 5.1.4 to 5.1.6

Vinceto/AuthLayer #7

5.1.4 → 5.1.6 Patch PR

Closed 11 months ago 1 comment

Bump cakephp/cakephp from 5.1.4 to 5.1.6

Hanraf/test_api_cakephp5 #58

5.1.4 → 5.1.6 Patch PR

Closed 11 months ago 2 comments

Bump cakephp/cakephp from 5.0.5 to 5.0.8

BokkunJp/cake.bokkun.jp #27

5.0.5 → 5.0.8 Patch PR

Closed over 1 year ago 1 comment

Bump cakephp/cakephp from 4.4.7 to 4.4.10

cakephp/cms-tutorial #8

4.4.7 → 4.4.10 Patch PR

Open almost 3 years ago 2 comments

Package Details

Name:	`cakephp/cakephp`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/cakephp/cakephp`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 7

MODERATE 9

View All composer Advisories

Package Information

Description:

The CakePHP framework

Repository:	https://github.com/cakephp/cakephp
Homepage:	https://cakephp.org
Latest Release:	`5.2.3` 9 months ago
Dependent Repos:	5,525
Dependent Packages:	1,514
Downloads:	15,696,597
Ranking:	Top 0.1245% by dependent repos Top 0.2102% by downloads Top 0.0266% by dependent pkgs

PR Status

Open 94 (28.1%)

Merged 6 (1.8%)

Closed 188 (56.1%)

PR Types

Minor 253 (75.5%)

Patch 35 (10.4%)