CakePHP 5.2.12 released

markstory
2026-01-15T03:49:52Z

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.2.12. This is a security fix release for the 5.2 branch that fixes a security issue with PaginatorHelper. This release is recommended for all applications using PaginatorHelper::limitControl() with CakePHP >= 5.2.10. Earlier releases are not impacted.

Bugfixes

You can expect the following changes in 5.2.11. See the changelog for every commit.

Fixed outputting unescaped HTML generated from request query string data in PaginatorHelper::limitControl().

Contributors to 5.2.12

Thank you to all the contributors that submitted a pull request:

Mark Story

phpcss-ankue