Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

codeigniter4/shield

4 known vulnerabilities (1 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 3 medium
Registry
Packagist

Advisories 4

  • CVE-2023-48707Medium 5.0

    Cleartext Storage of Sensitive Information in codeigniter4/shield

    Affected: fixed in 1.0.0-beta.8.

  • CVE-2023-48708Medium 5.0

    Insertion of Sensitive Information into Log in codeigniter4/shield

    Affected: fixed in 1.0.0-beta.8.

  • CodeIgniter Shield Password Shucking Vulnerability

    Affected: fixed in 1.0.0-beta.4.

  • CVE-2022-35943Medium 5.9

    SameSite may allow cross-site request forgery (CSRF) protection to be bypassed

    Affected: from 1.0.0-beta, fixed in 1.0.0-beta.2.