Security Advisories - codeigniter4/framework - Packagist

codeigniter4/framework Security Advisories for v4.2.6 (4)

Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4

CVE-2023-32692

Affected version: <4.3.5

Reported by:
GitHub
CVE-2022-46170: Potential Session Handlers Vulnerability

CVE-2022-46170

Affected version: <4.2.11

Reported by:
FriendsOfPHP/security-advisories, GitHub
CVE-2022-23556: Attackers may spoof IP address when using proxy

CVE-2022-23556

Affected version: <4.2.11

Reported by:
FriendsOfPHP/security-advisories, GitHub
CVE-2022-39284: Config\Cookie Secure or HttpOnly flag not set in CodeIgniter4

CVE-2022-39284

Affected version: <4.2.7

Reported by:
FriendsOfPHP/security-advisories, GitHub