CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Modified: 9/10/2026
package
pkg:packagist/codeigniter4/framework
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Modified: 9/10/2026
CodeIgniter4 DoS Vulnerability
Modified: 9/10/2026
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
Modified: 12/6/2023
CodeIgniter4 Potential Session Handlers Vulnerability
Modified: 12/6/2023
Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
Modified: 2/16/2024
Cross-site Scripting Vulnerability in CodeIgniter4
Modified: 2/16/2024
CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
Modified: 8/7/2026
CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability
Modified: 7/28/2025
CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions
Modified: 8/7/2026
CodeIgniter4 allows spoofing of IP address when using proxy
Modified: 12/6/2023
CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames
Modified: 8/7/2026
CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
Modified: 2/16/2024
CodeIgniter HTTP Header Injection
Modified: 4/24/2024
CodeIgniter Improper Privilege Management
Modified: 4/24/2024
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Modified: 9/10/2026
CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules
Modified: 8/7/2026
Deserialization of Untrusted Data in Codeigniter4
Modified: 2/16/2024
Missing validation of header name and value in codeigniter4/framework
Modified: 2/4/2026
Remote CLI Command Execution Vulnerability in CodeIgniter4
Modified: 2/16/2024