Composer codeigniter/framework has 6 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2014-8684 | CodeIgniter and Kohana vulnerable to PHP Object Injection | critical | 9.8 | <3.0.0 | 3.0.0 |
| CVE-2018-12071 | CodeIgniter Session Fixation Vulnerability | critical | 9.8 | <3.1.10 | 3.1.10 |
| GHSA-27qr-636m-wxg2 | codeigniter/framework SQL injection in ODBC database driver | critical | 10.0 | <3.1.0 | 3.1.0 |
| GHSA-q9j3-4ghj-6h57 | Inadequate XSS Prevention in CodeIgniter/Framework Security Library | medium | 4.7 | <3.0.3 | 3.0.3 |
| 2015-10-31-1 | XSS attack vector in Security Library method xss_clean() | unknown | 0.0 | <3.0.3 | 3.0.3 |
| 2016-07-26-1 | Critical SQL injection bug in the ODBC database driver | unknown | 0.0 | <3.1.0 | 3.1.0 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked