[CRITICAL] CodeIgniter and Kohana vulnerable to PHP Object Injection

PKSA-4p4w-tjbh-27v1 CVE-2014-8684 GHSA-w9ph-q4h9-rwq6

Affected version: <3.0.0

Reported by:
GitHub

[CRITICAL] CodeIgniter Session Fixation Vulnerability

PKSA-d7cs-gfrf-wsc4 CVE-2018-12071 GHSA-g434-3q2j-hj4r

Affected version: <3.1.10

Reported by:
GitHub

[CRITICAL] Critical SQL injection bug in the ODBC database driver

PKSA-9441-xhqz-8m7y GHSA-27qr-636m-wxg2

Affected version: <=3.0.6

Reported by:
FriendsOfPHP/security-advisories, GitHub

[MEDIUM] XSS attack vector in Security Library method xss_clean()

PKSA-dbww-1mjm-vsbv GHSA-q9j3-4ghj-6h57

Affected version: <3.0.3

Reported by:
FriendsOfPHP/security-advisories, GitHub