Cakephp 2.x — End of Life
EOLCakephp 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 2.10 | Jul 22, 2017 | Dec 15, 2020 | Jun 15, 2021 | 2.10.24 | EOL |
| 2.9 | Sep 18, 2016 | — | Yes | 2.9.9 | EOL |
| 2.8 | Feb 6, 2016 | — | Yes | 2.8.9 | EOL |
| 2.7 | Jul 11, 2015 | — | Yes | 2.7.11 | EOL |
| 2.6 | Dec 23, 2014 | — | Yes | 2.6.13 | EOL |
| 2.5 | May 12, 2014 | — | Yes | 2.5.9 | EOL |
| 2.4 | Aug 30, 2013 | — | Yes | 2.4.10 | EOL |
| 2.3 | Jan 28, 2013 | — | Yes | 2.3.10 | EOL |
| 2.2 | Jul 1, 2012 | — | Yes | 2.2.9 | EOL |
| 2.1 | Mar 4, 2012 | — | Yes | 2.1.5 | EOL |
| 2.0 | Oct 16, 2011 | — | Yes | 2.0.6 | EOL |
CVEs affecting Cakephp 2.x (0)
Cakephp 2.x is EOL — migrate to Cakephp 3.x
Cakephp 3.x is the next major release. Plan your upgrade before Cakephp 2.x stops receiving security patches.
Frequently asked questions
Is Cakephp 2 end of life?
Yes. All Cakephp 2.x releases have reached end of life and no longer receive security patches. Migrate to Cakephp 3.x as soon as possible.
What CVEs affect Cakephp 2?
No CVEs are currently tracked for Cakephp 2.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Cakephp 2 version?
The latest Cakephp 2.x patch release is 2.10.24, released on December 15, 2020. Always run the latest patch to benefit from all security fixes.
How to migrate from Cakephp 2 to Cakephp 3?
To migrate from Cakephp 2 to Cakephp 3: (1) review the official Cakephp 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Cakephp 2 in production?
No. Cakephp 2 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA