Version 4.7.2

Release Date: March 24, 2026

4.7.2 release of CodeIgniter4

Bugs Fixed

• Security: Fixed a bug where the CSRF filter could corrupt JSON request bodies after successful

  verification when the CSRF token was provided via the X-CSRF-TOKEN header. This caused IncomingRequest::getJSON() to fail on valid application/json requests.

See the repo’s CHANGELOG.md for a complete list of bugs fixed.