Cakephp 4.x — End of Life
ActiveCakephp 4.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 4.6 | Mar 22, 2025 | Sep 9, 2025 | Sep 9, 2026 | 4.6.4 | Active |
| 4.5 | Oct 14, 2023 | Mar 23, 2025 | Sep 9, 2026 | 4.5.11 | Active |
| 4.4 | Jun 6, 2022 | Oct 15, 2023 | Sep 9, 2026 | 4.4.18 | Active |
| 4.3 | Oct 23, 2021 | Jun 7, 2022 | Sep 9, 2026 | 4.3.11 | Active |
| 4.2 | Dec 20, 2020 | Oct 24, 2021 | Oct 14, 2023 | 4.2.12 | EOL |
| 4.1 | Jul 4, 2020 | Dec 21, 2020 | Yes | 4.1.7 | EOL |
| 4.0 | Dec 15, 2019 | Jul 5, 2020 | Yes | 4.0.10 | EOL |
CVEs affecting Cakephp 4.x (0)
Cakephp 4.x will reach end of life — migrate to Cakephp 5.x
Cakephp 5.x is the next major release. Plan your upgrade before Cakephp 4.x stops receiving security patches.
Frequently asked questions
Is Cakephp 4 end of life?
Partially. Some Cakephp 4.x releases have reached EOL. Check the version table above for the exact status of each sub-release.
What CVEs affect Cakephp 4?
No CVEs are currently tracked for Cakephp 4.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Cakephp 4 version?
The latest Cakephp 4.x patch release is 4.6.4, released on May 23, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Cakephp 4 to Cakephp 5?
To migrate from Cakephp 4 to Cakephp 5: (1) review the official Cakephp 5 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Cakephp 4 in production?
Cakephp 4 is still supported and safe for production use until September 9, 2026. Ensure you are running the latest patch version (4.6.4) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA