Cakephp 1.x — End of Life

EOL
EOL: Nov 1, 20151 release in this series0 CVEs

Cakephp 1.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
1.3Apr 25, 2010Nov 1, 2015Nov 1, 20151.3.21EOL

CVEs affecting Cakephp 1.x (0)

No CVEs tracked for Cakephp 1.x.

Cakephp 1.x is EOL — migrate to Cakephp 2.x

Cakephp 2.x is the next major release. Plan your upgrade before Cakephp 1.x stops receiving security patches.

See Cakephp 2.x

Frequently asked questions

Is Cakephp 1 end of life?

Yes. All Cakephp 1.x releases have reached end of life and no longer receive security patches. Migrate to Cakephp 2.x as soon as possible.

What CVEs affect Cakephp 1?

No CVEs are currently tracked for Cakephp 1.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Cakephp 1 version?

The latest Cakephp 1.x patch release is 1.3.21, released on October 31, 2015. Always run the latest patch to benefit from all security fixes.

How to migrate from Cakephp 1 to Cakephp 2?

To migrate from Cakephp 1 to Cakephp 2: (1) review the official Cakephp 2 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Cakephp 1 in production?

No. Cakephp 1 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA

© 2026 EOLCanary — Data from endoflife.date & NVD
Explore