CodeIgniter4 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in CodeIgniter4, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-54418	CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability CWE-78	9.8	Critical	2025-07-28
CVE-2025-24013	CodeIgniter validation of header name and value CWE-436	5.3	Medium	2025-01-20
CVE-2024-29904	CodeIgniter4 Language class DoS Vulnerability CWE-835	7.5	High	2024-03-29
CVE-2023-46240	CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment CWE-209	7.5	High	2023-10-31
CVE-2023-32692	Remote Code Execution Vulnerability in Validation Placeholders CWE-94	9.8	Critical	2023-05-30
CVE-2022-46170	CodeIgniter is vulnerable to improper authentication via Session Handlers CWE-287	8.6	High	2022-12-22
CVE-2022-23556	CodeIgniter is vulnerable to IP address spoofing when using proxy CWE-345	7.0	High	2022-12-22
CVE-2022-39284	Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4 CWE-665	2.6	Low	2022-10-06
CVE-2022-24712	Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 CWE-352	6.3	Medium	2022-02-28
CVE-2022-24711	Remote CLI Command Execution Vulnerability in CodeIgniter4 CWE-20	9.4	Critical	2022-02-28
CVE-2022-21715	Cross-site Scripting Vulnerability in CodeIgniter4 CWE-79	5.4	Medium	2022-01-24
CVE-2022-21647	Deserialization of Untrusted Data in Codeigniter4 CWE-502	7.7	High	2022-01-04

All 12 known CVE vulnerabilities affecting CodeIgniter4 with full Chinese analysis, references, and POCs where available.