CakePHP's code repositories are hosted at github.com.
Found a security exploit in CakePHP? Please don't message the mailing list, or open an issue on Github. Instead, please email security [at] cakephp.org. Email sent to this address are forwarded to the maintainers of CakePHP.
When a security issue is reported, we first try to confirm the vulnerability. Once confirmed, we'll do the following:
Found a bug? Suggest an improvement? Issue tracking for CakePHP can be found at Github.
Contributing to CakePHP is easy. Checkout the guide on contributing for how you can get started contributing to CakePHP.