codeigniter4/framework
The CodeIgniter framework v4
Security Advisories for codeigniter4/framework in packagist
Critical
20 days ago
CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules
packagist
codeigniter4/framework
High
20 days ago
CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames
packagist
codeigniter4/framework
Critical
20 days ago
CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions
packagist
codeigniter4/framework
Moderate
20 days ago
CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
packagist
codeigniter4/framework
Critical
3 months ago
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
packagist
codeigniter4/framework
Critical
about 1 year ago
CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability
packagist
codeigniter4/framework
Moderate
over 1 year ago
Missing validation of header name and value in codeigniter4/framework
packagist
codeigniter4/framework
High
almost 3 years ago
CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
packagist
codeigniter4/framework
Critical
over 3 years ago
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
packagist
codeigniter4/framework
High
over 3 years ago
CodeIgniter4 Potential Session Handlers Vulnerability
packagist
codeigniter4/framework
High
over 3 years ago
CodeIgniter4 allows spoofing of IP address when using proxy
packagist
codeigniter4/framework
Low
almost 4 years ago
Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
packagist
codeigniter4/framework
Moderate
over 4 years ago
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
packagist
codeigniter4/framework
Critical
over 4 years ago
Remote CLI Command Execution Vulnerability in CodeIgniter4
packagist
codeigniter4/framework
Moderate
over 4 years ago
Cross-site Scripting Vulnerability in CodeIgniter4
packagist
codeigniter4/framework
High
over 4 years ago
Deserialization of Untrusted Data in Codeigniter4
packagist
codeigniter4/framework