GHSA-39fp-mqmm-gxj6

Dashboard / Vulnerabilities / GHSA-39fp-mqmm-gxj6

GHSA-39fp-mqmm-gxj6

Summary: CodeIgniter4 DoS Vulnerability

Details: ### Impact A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. ### Patches Upgrade to v4.4.7 or later. See [upgrading guide](https://codeigniter4.github.io/userguide/installation/upgrade_447.html). ### Workarounds - Disabling Auto Routing prevents a known attack vector in the framework. - Do not pass invalid values to the `lang()` function or `Language` class. ### References - https://codeigniter4.github.io/userguide/outgoing/localization.html#language-localization - https://codeigniter4.github.io/userguide/general/common_functions.html#lang

References: https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-39fp-mqmm-gxj6, https://nvd.nist.gov/vuln/detail/CVE-2024-29904, https://github.com/codeigniter4/CodeIgniter4/commit/fa851acbae7ae4c5a97f8f38ae87aa0822a334c0, https://github.com/codeigniter4/CodeIgniter4