Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-mmj4-63m4-r6h5
  • Packagist/codeigniter4/framework
 CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules 07 Aug
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-hhmc-q9hp-r662
  • Packagist/codeigniter4/framework
 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames 07 Aug
  • Fix available
  • Severity - 7.5 (High)
GHSA-c9w5-rwh3-7pm9
  • Packagist/codeigniter4/framework
 CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions 07 Aug
  • Fix available
  • Severity - 9.4 (Critical)
GHSA-7wmf-pw8j-mc78
  • Packagist/codeigniter4/framework
 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure() 07 Aug
  • Fix available
  • Severity - 4.8 (Medium)
CVE-2026-63223
  • github.com/codeigniter4/codeigniter4
 CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules 31 Jul
  • Fix available
  • Severity - 9.8 (Critical)
CVE-2026-63222
  • github.com/codeigniter4/codeigniter4
 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames 31 Jul
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-63221
  • github.com/codeigniter4/codeigniter4
 CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions 31 Jul
  • Fix available
  • Severity - 9.4 (Critical)
CVE-2026-63220
  • github.com/codeigniter4/codeigniter4
 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure() 31 Jul
  • Fix available
  • Severity - 4.8 (Medium)
CVE-2026-48062
  • github.com/codeigniter4/codeigniter4
 CodeIgniter: Uploaded file extension validation bypass in `ext_in` rule 17 Jul
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-2gr4-ppc7-7mhx
  • Packagist/codeigniter4/framework
 CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule 11 Jun
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-9952-gv64-x94c
  • Packagist/codeigniter4/framework
 CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability 28 Jul 2025
  • Fix available
  • Severity - 9.8 (Critical)
CVE-2025-54418
  • github.com/codeigniter4/codeigniter4
 CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability 28 Jul 2025
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-x5mq-jjr3-vmx6
  • Packagist/codeigniter4/framework
 Missing validation of header name and value in codeigniter4/framework 21 Jan 2025
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2025-24013
  • github.com/codeigniter4/codeigniter4
 CodeIgniter validation of header name and value 20 Jan 2025
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-39fp-mqmm-gxj6
  • Packagist/codeigniter4/framework
 CodeIgniter4 DoS Vulnerability 29 Mar 2024
  • Fix available
  • Severity - 7.5 (High)
CVE-2024-29904
  • github.com/codeigniter4/codeigniter4
 CodeIgniter4 Language class DoS Vulnerability 29 Mar 2024
  • Fix available
  • Severity - 7.5 (High)
Load more...