| Package | Affected versions | Patched versions |
|---|---|---|
| codeigniter4/framework | < 4.4.3 | 4.4.3 |
| codeigniter | < 4.4.3 | 4.4.3 |
If an error or exception occurs in CodeIgniter4 v4.4.2 and earlier, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked.
Upgrade to v4.4.3 or later. See upgrading guide.
Replace ini_set('display_errors', '0') with ini_set('display_errors', 'Off') in app/Config/Boot/production.php.
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free