{"url":"http://public2.vulnerablecode.io/api/packages/577008?format=json","purl":"pkg:composer/codeigniter/framework@3.1.8","type":"composer","namespace":"codeigniter","name":"framework","version":"3.1.8","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265267?format=json","vulnerability_id":"VCID-2hsz-vuhe-dbak","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40826","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40826"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:45:27Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:45:27Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40826","reference_id":"CVE-2022-40826","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40826"}],"fixed_packages":[],"aliases":["CVE-2022-40826"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2hsz-vuhe-dbak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265272?format=json","vulnerability_id":"VCID-2qzt-eskd-7qf4","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40831","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40831"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40831","reference_id":"CVE-2022-40831","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40831"}],"fixed_packages":[],"aliases":["CVE-2022-40831"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2qzt-eskd-7qf4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265271?format=json","vulnerability_id":"VCID-3mhu-ddhm-5ke7","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40830","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40830"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:08:45Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:08:45Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40830","reference_id":"CVE-2022-40830","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40830"}],"fixed_packages":[],"aliases":["CVE-2022-40830"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3mhu-ddhm-5ke7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265266?format=json","vulnerability_id":"VCID-52pj-ryan-2yfj","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40825","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40825"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40825","reference_id":"CVE-2022-40825","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40825"}],"fixed_packages":[],"aliases":["CVE-2022-40825"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-52pj-ryan-2yfj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265270?format=json","vulnerability_id":"VCID-74bw-u8nc-3qbz","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40829","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40829"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:16:33Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-07-18T19:16:33Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40829","reference_id":"CVE-2022-40829","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40829"}],"fixed_packages":[],"aliases":["CVE-2022-40829"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-74bw-u8nc-3qbz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265269?format=json","vulnerability_id":"VCID-7wzt-96yg-jfah","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40828","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40828"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:56Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:56Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40828","reference_id":"CVE-2022-40828","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40828"}],"fixed_packages":[],"aliases":["CVE-2022-40828"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7wzt-96yg-jfah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265273?format=json","vulnerability_id":"VCID-9fmk-e4fz-2ybu","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40832","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40832"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40832","reference_id":"CVE-2022-40832","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40832"}],"fixed_packages":[],"aliases":["CVE-2022-40832"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9fmk-e4fz-2ybu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265268?format=json","vulnerability_id":"VCID-e2md-avz8-bya9","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40827","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40827"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-09T18:23:19Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40827","reference_id":"CVE-2022-40827","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40827"}],"fixed_packages":[],"aliases":["CVE-2022-40827"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e2md-avz8-bya9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265275?format=json","vulnerability_id":"VCID-e4vu-fhp3-j3em","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40834","reference_id":"","reference_type":"","scores":[{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50051","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50113","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50121","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40834"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40834","reference_id":"CVE-2022-40834","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40834"}],"fixed_packages":[],"aliases":["CVE-2022-40834"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e4vu-fhp3-j3em"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265274?format=json","vulnerability_id":"VCID-en5a-535z-ayca","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40833","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40833"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-20T18:14:05Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-20T18:14:05Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40833","reference_id":"CVE-2022-40833","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40833"}],"fixed_packages":[],"aliases":["CVE-2022-40833"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-en5a-535z-ayca"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/109916?format=json","vulnerability_id":"VCID-fpcv-9quu-8fe2","summary":"CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection\n### Impact\nThis vulnerability may allow [SameSite Attackers](https://canitakeyoursubdomain.name/) to bypass the [CodeIgniter4 CSRF protection](https://codeigniter4.github.io/userguide/libraries/security.html) mechanism with CodeIgniter Shield.\n\nFor this attack to succeed, the attacker must have direct (or indirect, e.g., XSS) control over a subdomain site (e.g., `https://a.example.com/`) of the target site (e.g., `http://example.com/`).\n\nThis vulnerability exists whether `Config\\Security::$csrfProtection` is `'cookie'` or `'session'`.\nIt is also exploitable whether `Config\\Security::$regenerate` is `true` or `false`.\n\n### Patches\nUpgrade to **CodeIgniter v4.2.3 or later** and **Shield v1.0.0-beta.2 or later**.\n\n### Workarounds\nDo all of the following:\n- set `Config\\Security::$csrfProtection` to `'session'`\n- remove old session data right after login (immediately after ID and password match)\n- regenerate CSRF token right after login (immediately after ID and password match)\n\n### References\n- [CodeIgniter4 CSRF Protection](https://codeigniter4.github.io/userguide/libraries/security.html)\n- [SameSite Attacks](https://canitakeyoursubdomain.name/)\n- [SameSite Cookies](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite)\n- [The great SameSite confusion](https://jub0bs.com/posts/2021-01-29-great-samesite-confusion/)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue or discussion in [codeigniter4/shield](https://github.com/codeigniter4/shield)\n* Email us at [security@codeigniter.com](mailto:security@codeigniter.com)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-35943","reference_id":"","reference_type":"","scores":[{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35637","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.35752","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00153","scoring_system":"epss","scoring_elements":"0.3574","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-35943"},{"reference_url":"https://codeigniter4.github.io/userguide/libraries/security.htm","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/"}],"url":"https://codeigniter4.github.io/userguide/libraries/security.htm"},{"reference_url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/"}],"url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite"},{"reference_url":"https://github.com/codeigniter4/shield","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/shield"},{"reference_url":"https://github.com/codeigniter4/shield/commit/342a368536678621998c3c41d276480cd14ec6c6","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/shield/commit/342a368536678621998c3c41d276480cd14ec6c6"},{"reference_url":"https://github.com/codeigniter4/shield/security/advisories/GHSA-5hm8-vh6r-2cjq","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/"}],"url":"https://github.com/codeigniter4/shield/security/advisories/GHSA-5hm8-vh6r-2cjq"},{"reference_url":"https://jub0bs.com/posts/2021-01-29-great-samesite-confusion","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:45:07Z/"}],"url":"https://jub0bs.com/posts/2021-01-29-great-samesite-confusion"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35943","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35943"},{"reference_url":"https://github.com/advisories/GHSA-5hm8-vh6r-2cjq","reference_id":"GHSA-5hm8-vh6r-2cjq","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5hm8-vh6r-2cjq"}],"fixed_packages":[],"aliases":["CVE-2022-35943","GHSA-5hm8-vh6r-2cjq"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fpcv-9quu-8fe2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265276?format=json","vulnerability_id":"VCID-gnfx-qs26-ukdx","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40835","reference_id":"","reference_type":"","scores":[{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50051","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50113","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00264","scoring_system":"epss","scoring_elements":"0.50121","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40835"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40835","reference_id":"CVE-2022-40835","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40835"}],"fixed_packages":[],"aliases":["CVE-2022-40835"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-gnfx-qs26-ukdx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/265265?format=json","vulnerability_id":"VCID-p756-2jkm-9fc5","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40824","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51732","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51741","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51672","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-40824"},{"reference_url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:40:35Z/"}],"url":"https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/6161","reference_id":"6161","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-05-21T18:40:35Z/"}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/6161"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40824","reference_id":"CVE-2022-40824","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40824"}],"fixed_packages":[],"aliases":["CVE-2022-40824"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p756-2jkm-9fc5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45245?format=json","vulnerability_id":"VCID-qdfk-n9gt-6yfp","summary":"Duplicate\nThis advisory duplicates another.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-32692","reference_id":"","reference_type":"","scores":[{"value":"0.0181","scoring_system":"epss","scoring_elements":"0.83197","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0181","scoring_system":"epss","scoring_elements":"0.83198","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-32692"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/CodeIgniter4"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-01-10T20:38:34Z/"}],"url":"https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md#v435-2023-05-21","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md#v435-2023-05-21"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/commit/6af677177fa1d9ad62f7a793bc96cba3068632ba","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/CodeIgniter4/commit/6af677177fa1d9ad62f7a793bc96cba3068632ba"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32692","reference_id":"CVE-2023-32692","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32692"},{"reference_url":"https://github.com/advisories/GHSA-m6m8-6gq8-c9fj","reference_id":"GHSA-m6m8-6gq8-c9fj","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m6m8-6gq8-c9fj"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-m6m8-6gq8-c9fj","reference_id":"GHSA-m6m8-6gq8-c9fj","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-01-10T20:38:34Z/"}],"url":"https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-m6m8-6gq8-c9fj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/65273?format=json","purl":"pkg:composer/codeigniter/framework@4.3.5","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@4.3.5"}],"aliases":["CVE-2023-32692","GHSA-m6m8-6gq8-c9fj","GMS-2023-1562"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qdfk-n9gt-6yfp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46320?format=json","vulnerability_id":"VCID-s6nh-cvkt-vygr","summary":"Generation of Error Message Containing Sensitive Information\nCodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked. Version 4.4.3 contains a patch. As a workaround, replace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-46240","reference_id":"","reference_type":"","scores":[{"value":"0.00426","scoring_system":"epss","scoring_elements":"0.62653","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00426","scoring_system":"epss","scoring_elements":"0.62662","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-46240"},{"reference_url":"https://codeigniter4.github.io/userguide/general/errors.html#error-reporting","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/"}],"url":"https://codeigniter4.github.io/userguide/general/errors.html#error-reporting"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/codeigniter4/CodeIgniter4"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/"}],"url":"https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46240","reference_id":"CVE-2023-46240","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46240"},{"reference_url":"https://github.com/advisories/GHSA-hwxf-qxj7-7rfj","reference_id":"GHSA-hwxf-qxj7-7rfj","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hwxf-qxj7-7rfj"},{"reference_url":"https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj","reference_id":"GHSA-hwxf-qxj7-7rfj","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-05T17:35:16Z/"}],"url":"https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj"}],"fixed_packages":[],"aliases":["CVE-2023-46240","GHSA-hwxf-qxj7-7rfj"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-s6nh-cvkt-vygr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/39981?format=json","vulnerability_id":"VCID-s814-tdxe-1baf","summary":"A Session Fixation issue exists in CodeIgniter because `session.use_strict_mode` in the Session Library was mishandled.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-12071","reference_id":"","reference_type":"","scores":[{"value":"0.00242","scoring_system":"epss","scoring_elements":"0.4767","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00242","scoring_system":"epss","scoring_elements":"0.47735","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00242","scoring_system":"epss","scoring_elements":"0.47734","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-12071"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcit-ci/CodeIgniter"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/commit/800a20d6c4662d99ae0988b2f8f2238bb8bb29db","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcit-ci/CodeIgniter/commit/800a20d6c4662d99ae0988b2f8f2238bb8bb29db"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/commit/a9da3dd2f16a8f97d7bc4ff5572b28e4bb84c813#diff-32788a4d3748e8818044886ab43241179c7f5f5b82e979e73146669ca6e2da1cR306","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcit-ci/CodeIgniter/commit/a9da3dd2f16a8f97d7bc4ff5572b28e4bb84c813#diff-32788a4d3748e8818044886ab43241179c7f5f5b82e979e73146669ca6e2da1cR306"},{"reference_url":"https://github.com/bcit-ci/CodeIgniter/issues/5958","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcit-ci/CodeIgniter/issues/5958"},{"reference_url":"https://web.archive.org/web/20181115214804/https://www.codeigniter.com/user_guide/changelog.html#version-3-1-9","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20181115214804/https://www.codeigniter.com/user_guide/changelog.html#version-3-1-9"},{"reference_url":"https://www.codeigniter.com/user_guide/changelog.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.codeigniter.com/user_guide/changelog.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12071","reference_id":"CVE-2018-12071","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12071"},{"reference_url":"https://github.com/advisories/GHSA-g434-3q2j-hj4r","reference_id":"GHSA-g434-3q2j-hj4r","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-g434-3q2j-hj4r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/63049?format=json","purl":"pkg:composer/codeigniter/framework@3.1.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2hsz-vuhe-dbak"},{"vulnerability":"VCID-2qzt-eskd-7qf4"},{"vulnerability":"VCID-3mhu-ddhm-5ke7"},{"vulnerability":"VCID-52pj-ryan-2yfj"},{"vulnerability":"VCID-74bw-u8nc-3qbz"},{"vulnerability":"VCID-7wzt-96yg-jfah"},{"vulnerability":"VCID-9fmk-e4fz-2ybu"},{"vulnerability":"VCID-e2md-avz8-bya9"},{"vulnerability":"VCID-e4vu-fhp3-j3em"},{"vulnerability":"VCID-en5a-535z-ayca"},{"vulnerability":"VCID-fpcv-9quu-8fe2"},{"vulnerability":"VCID-gnfx-qs26-ukdx"},{"vulnerability":"VCID-p756-2jkm-9fc5"},{"vulnerability":"VCID-qdfk-n9gt-6yfp"},{"vulnerability":"VCID-s6nh-cvkt-vygr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@3.1.10"}],"aliases":["CVE-2018-12071","GHSA-g434-3q2j-hj4r"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-s814-tdxe-1baf"}],"fixing_vulnerabilities":[],"risk_score":"4.5","resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/codeigniter/framework@3.1.8"}