Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/577009?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/577009?format=api", "purl": "pkg:composer/codeigniter/framework@3.1.9", "type": "composer", "namespace": "codeigniter", "name": "framework", "version": "3.1.9", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265267?format=api", "vulnerability_id": "VCID-2hsz-vuhe-dbak", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40826", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40826" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:45:27Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:45:27Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40826", "reference_id": "CVE-2022-40826", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40826" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40826" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2hsz-vuhe-dbak" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265272?format=api", "vulnerability_id": "VCID-2qzt-eskd-7qf4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40831", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40831" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40831", "reference_id": "CVE-2022-40831", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40831" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40831" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2qzt-eskd-7qf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265271?format=api", "vulnerability_id": "VCID-3mhu-ddhm-5ke7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40830", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40830" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:08:45Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:08:45Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40830", "reference_id": "CVE-2022-40830", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40830" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40830" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3mhu-ddhm-5ke7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265266?format=api", "vulnerability_id": "VCID-52pj-ryan-2yfj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40825", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40825" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40825", "reference_id": "CVE-2022-40825", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40825" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40825" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-52pj-ryan-2yfj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265270?format=api", "vulnerability_id": "VCID-74bw-u8nc-3qbz", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40829", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40829" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:16:33Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:16:33Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40829", "reference_id": "CVE-2022-40829", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40829" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40829" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-74bw-u8nc-3qbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265269?format=api", "vulnerability_id": "VCID-7wzt-96yg-jfah", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40828", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40828" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:56Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:56Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40828", "reference_id": "CVE-2022-40828", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40828" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40828" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7wzt-96yg-jfah" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265273?format=api", "vulnerability_id": "VCID-9fmk-e4fz-2ybu", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40832", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40832" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40832", "reference_id": "CVE-2022-40832", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40832" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40832" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9fmk-e4fz-2ybu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265268?format=api", "vulnerability_id": "VCID-e2md-avz8-bya9", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40827", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40827" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:19Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40827", "reference_id": "CVE-2022-40827", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40827" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40827" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e2md-avz8-bya9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265275?format=api", "vulnerability_id": "VCID-e4vu-fhp3-j3em", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40834", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50051", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50113", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50121", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40834" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40834", "reference_id": "CVE-2022-40834", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40834" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40834" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e4vu-fhp3-j3em" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265274?format=api", "vulnerability_id": "VCID-en5a-535z-ayca", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40833", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40833" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-20T18:14:05Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-20T18:14:05Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40833", "reference_id": "CVE-2022-40833", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40833" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40833" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-en5a-535z-ayca" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109916?format=api", "vulnerability_id": "VCID-fpcv-9quu-8fe2", "summary": "CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection\n### Impact\nThis vulnerability may allow [SameSite Attackers](https://canitakeyoursubdomain.name/) to bypass the [CodeIgniter4 CSRF protection](https://codeigniter4.github.io/userguide/libraries/security.html) mechanism with CodeIgniter Shield.\n\nFor this attack to succeed, the attacker must have direct (or indirect, e.g., XSS) control over a subdomain site (e.g., `https://a.example.com/`) of the target site (e.g., `http://example.com/`).\n\nThis vulnerability exists whether `Config\\Security::$csrfProtection` is `'cookie'` or `'session'`.\nIt is also exploitable whether `Config\\Security::$regenerate` is `true` or `false`.\n\n### Patches\nUpgrade to **CodeIgniter v4.2.3 or later** and **Shield v1.0.0-beta.2 or later**.\n\n### Workarounds\nDo all of the following:\n- set `Config\\Security::$csrfProtection` to `'session'`\n- remove old session data right after login (immediately after ID and password match)\n- regenerate CSRF token right after login (immediately after ID and password match)\n\n### References\n- [CodeIgniter4 CSRF Protection](https://codeigniter4.github.io/userguide/libraries/security.html)\n- [SameSite Attacks](https://canitakeyoursubdomain.name/)\n- [SameSite Cookies](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite)\n- [The great SameSite confusion](https://jub0bs.com/posts/2021-01-29-great-samesite-confusion/)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue or discussion in [codeigniter4/shield](https://github.com/codeigniter4/shield)\n* Email us at [security@codeigniter.com](mailto:security@codeigniter.com)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35943", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.35637", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.35752", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.3574", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35943" }, { "reference_url": "https://codeigniter4.github.io/userguide/libraries/security.htm", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/" } ], "url": "https://codeigniter4.github.io/userguide/libraries/security.htm" }, { "reference_url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/" } ], "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite" }, { "reference_url": "https://github.com/codeigniter4/shield", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/shield" }, { "reference_url": "https://github.com/codeigniter4/shield/commit/342a368536678621998c3c41d276480cd14ec6c6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/shield/commit/342a368536678621998c3c41d276480cd14ec6c6" }, { "reference_url": "https://github.com/codeigniter4/shield/security/advisories/GHSA-5hm8-vh6r-2cjq", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/" } ], "url": "https://github.com/codeigniter4/shield/security/advisories/GHSA-5hm8-vh6r-2cjq" }, { "reference_url": "https://jub0bs.com/posts/2021-01-29-great-samesite-confusion", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/" } ], "url": "https://jub0bs.com/posts/2021-01-29-great-samesite-confusion" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35943", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35943" }, { "reference_url": "https://github.com/advisories/GHSA-5hm8-vh6r-2cjq", "reference_id": "GHSA-5hm8-vh6r-2cjq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5hm8-vh6r-2cjq" } ], "fixed_packages": [], "aliases": [ "CVE-2022-35943", "GHSA-5hm8-vh6r-2cjq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fpcv-9quu-8fe2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265276?format=api", "vulnerability_id": "VCID-gnfx-qs26-ukdx", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40835", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50051", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50113", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00264", "scoring_system": "epss", "scoring_elements": "0.50121", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40835" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40835", "reference_id": "CVE-2022-40835", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40835" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40835" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gnfx-qs26-ukdx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/265265?format=api", "vulnerability_id": "VCID-p756-2jkm-9fc5", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40824", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51732", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51741", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00281", "scoring_system": "epss", "scoring_elements": "0.51672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-40824" }, { "reference_url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:40:35Z/" } ], "url": "https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/6161", "reference_id": "6161", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:40:35Z/" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/6161" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40824", "reference_id": "CVE-2022-40824", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40824" } ], "fixed_packages": [], "aliases": [ "CVE-2022-40824" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p756-2jkm-9fc5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45245?format=api", "vulnerability_id": "VCID-qdfk-n9gt-6yfp", "summary": "Duplicate\nThis advisory duplicates another.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-32692", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0181", "scoring_system": "epss", "scoring_elements": "0.83197", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0181", "scoring_system": "epss", "scoring_elements": "0.83198", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-32692" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/CodeIgniter4" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-01-10T20:38:34Z/" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md#v435-2023-05-21", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md#v435-2023-05-21" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/commit/6af677177fa1d9ad62f7a793bc96cba3068632ba", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/commit/6af677177fa1d9ad62f7a793bc96cba3068632ba" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32692", "reference_id": "CVE-2023-32692", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32692" }, { "reference_url": "https://github.com/advisories/GHSA-m6m8-6gq8-c9fj", "reference_id": "GHSA-m6m8-6gq8-c9fj", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-m6m8-6gq8-c9fj" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-m6m8-6gq8-c9fj", "reference_id": "GHSA-m6m8-6gq8-c9fj", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-01-10T20:38:34Z/" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-m6m8-6gq8-c9fj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65273?format=api", "purl": "pkg:composer/codeigniter/framework@4.3.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@4.3.5" } ], "aliases": [ "CVE-2023-32692", "GHSA-m6m8-6gq8-c9fj", "GMS-2023-1562" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qdfk-n9gt-6yfp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46320?format=api", "vulnerability_id": "VCID-s6nh-cvkt-vygr", "summary": "Generation of Error Message Containing Sensitive Information\nCodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked. Version 4.4.3 contains a patch. As a workaround, replace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-46240", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00426", "scoring_system": "epss", "scoring_elements": "0.62653", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00426", "scoring_system": "epss", "scoring_elements": "0.62662", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-46240" }, { "reference_url": "https://codeigniter4.github.io/userguide/general/errors.html#error-reporting", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/" } ], "url": "https://codeigniter4.github.io/userguide/general/errors.html#error-reporting" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/codeigniter4/CodeIgniter4" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46240", "reference_id": "CVE-2023-46240", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46240" }, { "reference_url": "https://github.com/advisories/GHSA-hwxf-qxj7-7rfj", "reference_id": "GHSA-hwxf-qxj7-7rfj", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-hwxf-qxj7-7rfj" }, { "reference_url": "https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj", "reference_id": "GHSA-hwxf-qxj7-7rfj", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/" } ], "url": "https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj" } ], "fixed_packages": [], "aliases": [ "CVE-2023-46240", "GHSA-hwxf-qxj7-7rfj" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s6nh-cvkt-vygr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39981?format=api", "vulnerability_id": "VCID-s814-tdxe-1baf", "summary": "A Session Fixation issue exists in CodeIgniter because `session.use_strict_mode` in the Session Library was mishandled.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12071", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00242", "scoring_system": "epss", "scoring_elements": "0.4767", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00242", "scoring_system": "epss", "scoring_elements": "0.47735", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00242", "scoring_system": "epss", "scoring_elements": "0.47734", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12071" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bcit-ci/CodeIgniter" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/commit/800a20d6c4662d99ae0988b2f8f2238bb8bb29db", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bcit-ci/CodeIgniter/commit/800a20d6c4662d99ae0988b2f8f2238bb8bb29db" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/commit/a9da3dd2f16a8f97d7bc4ff5572b28e4bb84c813#diff-32788a4d3748e8818044886ab43241179c7f5f5b82e979e73146669ca6e2da1cR306", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bcit-ci/CodeIgniter/commit/a9da3dd2f16a8f97d7bc4ff5572b28e4bb84c813#diff-32788a4d3748e8818044886ab43241179c7f5f5b82e979e73146669ca6e2da1cR306" }, { "reference_url": "https://github.com/bcit-ci/CodeIgniter/issues/5958", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/bcit-ci/CodeIgniter/issues/5958" }, { "reference_url": "https://web.archive.org/web/20181115214804/https://www.codeigniter.com/user_guide/changelog.html#version-3-1-9", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20181115214804/https://www.codeigniter.com/user_guide/changelog.html#version-3-1-9" }, { "reference_url": "https://www.codeigniter.com/user_guide/changelog.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.codeigniter.com/user_guide/changelog.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12071", "reference_id": "CVE-2018-12071", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12071" }, { "reference_url": "https://github.com/advisories/GHSA-g434-3q2j-hj4r", "reference_id": "GHSA-g434-3q2j-hj4r", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-g434-3q2j-hj4r" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63049?format=api", "purl": "pkg:composer/codeigniter/framework@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hsz-vuhe-dbak" }, { "vulnerability": "VCID-2qzt-eskd-7qf4" }, { "vulnerability": "VCID-3mhu-ddhm-5ke7" }, { "vulnerability": "VCID-52pj-ryan-2yfj" }, { "vulnerability": "VCID-74bw-u8nc-3qbz" }, { "vulnerability": "VCID-7wzt-96yg-jfah" }, { "vulnerability": "VCID-9fmk-e4fz-2ybu" }, { "vulnerability": "VCID-e2md-avz8-bya9" }, { "vulnerability": "VCID-e4vu-fhp3-j3em" }, { "vulnerability": "VCID-en5a-535z-ayca" }, { "vulnerability": "VCID-fpcv-9quu-8fe2" }, { "vulnerability": "VCID-gnfx-qs26-ukdx" }, { "vulnerability": "VCID-p756-2jkm-9fc5" }, { "vulnerability": "VCID-qdfk-n9gt-6yfp" }, { "vulnerability": "VCID-s6nh-cvkt-vygr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@3.1.10" } ], "aliases": [ "CVE-2018-12071", "GHSA-g434-3q2j-hj4r" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s814-tdxe-1baf" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@3.1.9" }