[CRITICAL] CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

PKSA-kcm9-w3rf-jxsk CVE-2026-63223 GHSA-mmj4-63m4-r6h5

Affected package: codeigniter4/framework

Affected version: <4.7.4

Reported by:
GitHub