When False CVEs Cause Real Problems

A closer look at CVE-2025-45406. An invalid vulnerability claim against CodeIgniter4 that caused real-world disruption, and a call for responsible disclosure.

July 29, 2025 · 4 min