https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:21:07.502799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159462 EUVD-2026-159462 2026-10-03T13:21:07.505256+00:00 EUVD-2026-159462 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29904 fkie_cve-2024-29904 2026-10-03T13:21:07.505286+00:00

CodeIgniter is a PHP full-stack web framework A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Upgrade to v4.4.7 or later.

 https://cve.radiocsirt.org/vuln/ghsa-39fp-mqmm-gxj6 GHSA-39fp-mqmm-gxj6 — CodeIgniter4 DoS Vulnerability 2026-10-03T13:21:07.505317+00:00

Affected: Packagist: codeigniter4/framework

### Impact A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server.

### Patches Upgrade to v4.4.7 or later. See [upgrading guide](https://codeigniter4.github.io/userguide/installation/upgrade_447.html).

### Workarounds - Disabling Auto Routing prevents a known attack vector in the framework. - Do not pass invalid values to the `lang()` function or `Language` class.

### References - https://codeigniter4.github.io/userguide/outgoing/localization.html#language-localization - https://codeigniter4.github.io/userguide/general/common_functions.html#lang

 https://cve.radiocsirt.org/vuln/gsd-2024-29904 gsd-2024-29904 2026-10-03T13:21:07.505346+00:00 gsd-2024-29904