cakephp/authentication

Healthy and suitable to depend on. It has a long release history, a recent release, active work from four contributors, and clear CakePHP organization backing, with repository security controls and no risky workflow patterns.

Latest 4.2.1

Packagist

94%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-829650 cakephp/authentication is vulnerable to Authentication Bypass in versions 0.0.1 - 2.11.1, 3.0.0 - 3.3.6 and 4.0.0 - 4.2.0.	0.0.1 - 2.11.13.0.0 - 3.3.64.0.0 - 4.2.0	Critical
CVE-2026-55590 cakephp/authentication is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 4.0.0 - 4.1.1, 3.0.0 - 3.3.6 and 0.0.0 - 2.11.1.	0.0.0 - 2.11.13.0.0 - 3.3.64.0.0 - 4.1.1	Medium

Package versions

Maintainers

CakePHP Community

Direct Dependencies

Dependency	Last Release	Score
cakephp/http Version ^5.0	—	—
cakephp/utility Version ^5.0	—	—
psr/http-client Version ^1.0	—	—
psr/http-message Version ^1.1 \|\| ^2.0	—	—
psr/http-server-handler Version ^1.0	—	—