CVE-2026-77635

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-77635
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-77635.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-77635
Aliases
Downstream
Published
2026-08-24T20:30:34Z
Modified
2026-09-11T03:31:03Z
Severity
  • 9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
Details

CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver is vulnerable to SQL injection when user-controlled data is supplied to the jsonPath parameter. This issue is fixed in versions 5.1.10, 5.2.15, and 5.3.7.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77635.json"
}
References

Affected packages

Git / github.com/cakephp/cakephp

Affected ranges

Type
GIT
Repo
https://github.com/cakephp/cakephp
Events
Introduced
eb61f6b7b7e9c39f91ccd5c48c82336128217e73
Introduced
8eb600bb67a545e2d108f9ae64146f094a39bb55
Introduced
c0175d821a5e42b934ad2a11927c5c5d0e659a0d
Fixed
1b06accdee89c0993a8cbccc865bc43f079ed3c9
Fixed
d1e4a9327c6c0f389ac27ac1c4fb79a9446bdf41
Fixed
c0d21e0da4216d51268691af3ad803f0eecb3a11
Fixed
138f2f61486532c29ee4d106da2a9848c1ff1ab3
Fixed
489a40fb7c6e597af33fe0f7264047afccb90d55
Fixed
9f1ad970a3b72293d4a37e694276645f804e819f
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "fixed": "5.1.10"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "fixed": "5.2.15"
        },
        {
            "introduced": "5.3.0"
        },
        {
            "fixed": "5.3.7"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

5.*
5.1.0
5.1.1
5.1.2
5.1.4
5.1.5
5.1.6
5.1.7
5.1.8
5.1.9
5.2.0
5.2.1
5.2.10
5.2.11
5.2.12
5.2.13
5.2.14
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
5.2.9
5.3.0
5.3.1
5.3.2
5.3.3
5.3.4
5.3.5
5.3.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-77635.json"