Skip to content

CakePHP 4.2.11 released
Compare
Choose a tag to compare
@markstory markstory released this 06 Jan 03:23
· 2301 commits to 4.x since this release
4.2.11
This tag was signed with the committer’s verified signature.
markstory Mark Story
GPG key ID: 3C070F5E55B3AEA0
Learn about vigilant mode.
0906c14

The CakePHP core team is happy to announce the immediate availability of CakePHP 4.2.11. This release contain a security fix for the limit() and offset() methods of Cake\Database\Query. If passed unfiltered request data, these methods would allow for SQL injection. If your application does not use CakePHP's Pagination wrappers and directly passes request data into one of these methods your application is vulnerable. We'd like to thank 'Tanaka' for reporting this issue.

Assets 2