cakephp/debug_kit
Debug Toolbar for CakePHP applications.
View on Github
Activity
- Latest release
- 3mo ago
- Total releases
- 166
- Cadence
- ~30 days
- Last 12 months
- 8
Reach
- Stars
- 839
Details
- License
- MIT
- First release
- Aug 23, 2013
| Version | Released | |
|---|---|---|
4.10.3
patch
| ||
5.2.4
patch
| ||
5.2.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.2.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.2.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.2.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.5
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.4
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.1.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.6
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.5
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.10.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.4
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.6
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.10.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.10.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.5
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
5.0.0
major
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.4
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.9.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.8.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.8.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.7.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.7.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.6.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.5.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.4.4
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
3.23.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.4.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.4.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.4.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.4.0
minor
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.9
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.8
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.7
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.6
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.5
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.4
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.3
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.2
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev | ||
4.3.1
patch
1 CVE
CVE-2026-54614
GHSA-p46m-g734-vpc4
Aug 26, 2026
cakephp/debug_kit: MailPreview contains unsafe reflection
4.3
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
None
ImpactThe
Patches5.2.4 and 4.10.3 contain patches for this issue. WorkaroundsEnsure that debugkit is only part of your development dependencies, and that debug mode is disabled in production environments. Affected versions
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
3.0.0
3.0.0-beta
3.0.0-beta2
+ 152 more Show less
3.0.1
3.0.2
3.1.0
3.1.1
3.1.10
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.10.0
3.10.1
3.10.2
3.10.3
3.10.4
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
3.11.6
3.12.0
3.13.0
3.14.0
3.14.1
3.14.2
3.15.0
3.15.1
3.15.2
3.15.3
3.16.0
3.16.1
3.16.2
3.16.3
3.16.4
3.16.5
3.16.6
3.16.7
3.17.0
3.17.1
3.18.0
3.19.0
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.20.0
3.20.1
3.20.2
3.20.3
3.20.4
3.20.5
3.21.0
3.21.1
3.22.1
3.22.2
3.22.3
3.22.4
3.23.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.3.6
3.3.7
3.4.0
3.4.1
3.4.2
3.4.3
3.5.0
3.5.1
3.6.0
3.7.0
3.8.0
3.9.0
3.9.1
3.9.2
3.9.3
3.9.4
3.9.5
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
4.0.6
4.1.0
4.1.1
4.1.2
4.1.3
4.10.0
4.10.1
4.10.2
4.2.0
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.3.6
4.3.7
4.3.8
4.3.9
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.5.0
4.6.0
4.7.0
4.7.1
4.8.0
4.8.1
4.9.0
4.9.1
4.9.2
4.9.3
4.9.4
4.9.5
4.9.6
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
5.2.1
5.2.2
5.2.3
Fixed in
4.10.3
5.2.4
References
Updated Aug 26, 2026 · Source: OSV.dev |