Cakephp 4.x — End of Life

Active
7 releases in this series0 CVEs

Cakephp 4.x is partially supported: only 4.6 still receives security fixes. The most recent release in this series is 4.6.5. No CVE is currently tracked for Cakephp 4.x. The next major version is Cakephp 5. See Cakephp 5 →

Cakephp 4.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
4.6Mar 22, 2025Sep 9, 2025No4.6.5Active
4.5Oct 14, 2023Mar 23, 2025Sep 9, 20264.5.12EOL
4.4Jun 6, 2022Oct 15, 2023Sep 9, 20264.4.18EOL
4.3Oct 23, 2021Jun 7, 2022Sep 9, 20264.3.11EOL
4.2Dec 20, 2020Oct 24, 2021Oct 14, 20234.2.12EOL
4.1Jul 4, 2020Dec 21, 2020Yes4.1.7EOL
4.0Dec 15, 2019Jul 5, 2020Yes4.0.10EOL

CVEs affecting Cakephp 4.x (0)

No CVEs tracked for Cakephp 4.x.

Cakephp 4.x will reach end of life — migrate to Cakephp 5.x

Cakephp 5.x is the next major release. Plan your upgrade before Cakephp 4.x stops receiving security patches.

See Cakephp 5.x

Add a Cakephp 4 EOL badge to your README

Show your users which Cakephp version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Cakephp 4 EOL status
[![Cakephp 4 EOL status](https://eolcanary.com/badge/cakephp/4.svg)](https://eolcanary.com/explore/cakephp/4)

Frequently asked questions

Is Cakephp 4 end of life?

Partially. 6 of the 7 Cakephp 4.x releases have reached end of life. Still supported: 4.6.

What CVEs affect Cakephp 4?

No CVEs are currently tracked for Cakephp 4.x in the NVD data we monitor.

What is the latest Cakephp 4 version?

The latest Cakephp 4.x patch release is 4.6.5, released on July 14, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Cakephp 4 to Cakephp 5?

To migrate from Cakephp 4 to Cakephp 5: (1) review the official Cakephp 5 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Cakephp 4 in production?

Only on a supported release (4.6). Make sure you run the latest patch (4.6.5) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA