codeigniter4/framework vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-48062Criticalcodeigniter4/framework: CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule CVE-2025-54418Criticalcodeigniter4/framework: CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability CVE-2025-24013Mediumcodeigniter4/framework: Missing validation of header name and value in codeigniter4/framework CVE-2024-29904Highcodeigniter4/framework: CodeIgniter4 DoS Vulnerability CVE-2023-46240Highcodeigniter4/framework: CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment CVE-2023-32692Criticalcodeigniter4/framework: Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4 CVE-2022-46170Highcodeigniter4/framework: CodeIgniter4 Potential Session Handlers Vulnerability CVE-2022-23556Highcodeigniter4/framework: CodeIgniter4 allows spoofing of IP address when using proxy CVE-2022-39284Lowcodeigniter4/framework: Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued CVE-2020-10793Highcodeigniter4/framework: CodeIgniter Improper Privilege Management CVE-2017-1000247Highcodeigniter4/framework: CodeIgniter HTTP Header Injection CVE-2022-24712Mediumcodeigniter4/framework: Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 CVE-2022-24711Criticalcodeigniter4/framework: Remote CLI Command Execution Vulnerability in CodeIgniter4 CVE-2022-21715Mediumcodeigniter4/framework: Cross-site Scripting Vulnerability in CodeIgniter4 CVE-2022-21647Highcodeigniter4/framework: Deserialization of Untrusted Data in Codeigniter4

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo