cakephp/debug_kit: MailPreview contains unsafe reflection
The MailPreview feature of debugkit is vulnerable to arbitrary constructor execution. For an application to be vulnerable the following conditions must be true: debug mode must be enabled. The hostname must match a 'local' domain or be in an allowlist.