Packagist/codeigniter4/framework

CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule

Modified: 9/10/2026

CodeIgniter4 DoS Vulnerability

Modified: 9/10/2026

Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

Modified: 12/6/2023

CodeIgniter4 Potential Session Handlers Vulnerability

Modified: 12/6/2023

Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued

Modified: 2/16/2024

Cross-site Scripting Vulnerability in CodeIgniter4

Modified: 2/16/2024

CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()

Modified: 8/7/2026

CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability

Modified: 7/28/2025

CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

Modified: 8/7/2026

CodeIgniter4 allows spoofing of IP address when using proxy

Modified: 12/6/2023

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

Modified: 8/7/2026

CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment

Modified: 2/16/2024

CodeIgniter HTTP Header Injection

Modified: 4/24/2024

CodeIgniter Improper Privilege Management

Modified: 4/24/2024

Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4

Modified: 9/10/2026

CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

Modified: 8/7/2026

Deserialization of Untrusted Data in Codeigniter4

Modified: 2/16/2024

Missing validation of header name and value in codeigniter4/framework

Modified: 2/4/2026

Remote CLI Command Execution Vulnerability in CodeIgniter4

Modified: 2/16/2024