{"vulnerability": "cve-2026-63221", "sightings": [{"uuid": "65026d9e-9a6a-47a8-a6ad-4b6f60ae7501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63221", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwcnfh5zx2y", "content": "CVE-2026-63221\nUsing CodeIgniter's deleteBatch() function between versions 4.3.0 and 4.7.3 can allow malicious users to inject their own SQL code. This could lead to unauthorized data changes or even complete database\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T06:18:04.943603Z"}, {"uuid": "0408c207-df4d-441a-9542-e60f16ee2e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/es6x4hg2ubacn", "content": "CVE-2026-63221 - CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions\nCVE ID : CVE-2026-63221\n \n Published : July 31, 2026, 6:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : CodeIgniter is a PHP full-stack web framework. Fr...", "creation_timestamp": "2026-07-31T07:49:18.200730Z"}]}