CO
Product
CodeIgniter4
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 3Low 0
Watch
Add CodeIgniter4 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63223 | 9.8 | Jul 31 | CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules Affected: < 4.7.4 |
| CVE-2026-48062 | 9.8 | Jul 17 | CodeIgniter: Uploaded file extension validation bypass in `ext_in` rule Affected: < 4.7.3 |
| CVE-2025-54418 | 9.8 | Jul 28 | CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability Affected: < 4.6.2 |
| CVE-2026-63221 | 9.4 | Jul 31 | CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions Affected: >= 4.3.0, < 4.7.4 |
Showing 4