Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cakephp/bake

              3.x @ c6c6b97
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Mass Assignment: 2 prior fixes. Scrutinize any change in this area.

lib/Cake/Console/Command/Task/ProjectTask.php: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Mass Assignment: Code-generation templates for CakePHP entities previously initialized the accessible properties mapping in a format that could lead to unintended mass assignment vulnerabilities in applications built with the tool.

Mass Assignment: The model scaffolding task generated mass-assignable fields without excluding primary keys, which allowed downstream users to inadvertently expose database identifiers to client-side modification.

Insecure Defaults: Project creation routines failed to properly replace default security salt and cipher seed placeholder configurations due to outdated regex matching, leaving generated applications with weak, predictable cryptographic defaults.