Security Advisories · codeigniter4/CodeIgniter4 · GitHub

Security Advisories

View information about security vulnerabilities from this repository's maintainers.

Language class DoS Vulnerability
GHSA-39fp-mqmm-gxj6 published Mar 29, 2024 by kenjis

High
Detailed Error Report is Displayed in Production Environment
GHSA-hwxf-qxj7-7rfj published Oct 26, 2023 by kenjis

High
Remote Code Execution Vulnerability in Validation Placeholders
GHSA-m6m8-6gq8-c9fj published May 21, 2023 by kenjis

Critical
Potential Session Handlers Vulnerability
GHSA-6cq5-8cj7-g558 published Dec 22, 2022 by MGatner

High
Attackers may spoof IP address when using proxy
GHSA-ghw3-5qvm-3mqc published Dec 22, 2022 by MGatner

High
Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4
GHSA-745p-r637-7vvp published Oct 6, 2022 by MGatner

Low
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
GHSA-4v37-24gm-h554 published Feb 26, 2022 by MGatner

Moderate
Remote CLI Command Execution Vulnerability in CodeIgniter4
GHSA-xjp4-6w75-qrj7 published Feb 26, 2022 by MGatner

Critical
XSS Vulnerability in API\ResponseTrait in CodeIgniter4
GHSA-7528-7jg5-6g62 published Jan 24, 2022 by MGatner

Moderate
Deserialization of Untrusted Data in Codeigniter4
GHSA-w6jr-wj64-mc9x published Jan 3, 2022 by MGatner

High