TastyIgniter vulnerabilities

CVEs whose affected-version data names the TastyIgniter package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-29001High· 7.2

yesterday

TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized a…

▾ Twilighttastyigniter · TastyIgnitervia CVEORG