cakephp debug_kit vulnerabilities (CVE)

CVE records published for cakephp debug_kit, newest first. Follow to get an email when a new one appears.

1 results
4.3Medium
CVE-2026-54614

DebugKit: MailPreview contains unsafe reflection

cakephp debug_kit

DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewController.php accepts a route-controlled previewName value in findPreview and passes the resolved class f…