CVE-2024-29904: CodeIgniter4 DoS Vulnerability

March 29, 2024 (updated May 7, 2025)

A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server.

References

github.com/advisories/GHSA-39fp-mqmm-gxj6
github.com/codeigniter4/CodeIgniter4
github.com/codeigniter4/CodeIgniter4/commit/fa851acbae7ae4c5a97f8f38ae87aa0822a334c0
github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-39fp-mqmm-gxj6
nvd.nist.gov/vuln/detail/CVE-2024-29904

Code Behaviors & Features

Detect and mitigate CVE-2024-29904 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →