1. Introduction
Inflammatory bowel disease (IBD) encompasses two principal forms of chronic intestinal inflammation: ulcerative colitis (UC) and Crohn’s disease (CD) [
1]. In the United States alone, an estimated 2.4 to 2.8 million individuals are affected [
2]. The pathogenesis involves an interaction between immune responses, altered gut microbiota, genetic susceptibility, and environmental triggers. Activated macrophages and dendritic cells produce interleukin (IL)-12 and IL-23, which signal through Janus kinase (JAK) and signal transducer and activator of transcription (STAT) pathways to drive the inflammatory cascade. Downstream activation of naïve T cells leads to production of interferon (IFN)-γ and tumor necrosis factor (TNF) [
1]. IFN-γ exerts direct cytotoxic and antiangiogenic effects on tumor cells, while IL-23 plays a dual role, contributing to antitumor surveillance through IFN-γ production but also potentially promoting tumorigenesis via IL-17/STAT3 signaling. TNF participates in antitumor surveillance by promoting CD8+ T-cell priming and enabling recognition and destruction of malignant cells.
Infliximab and adalimumab are monoclonal antibodies (mAbs) that neutralize TNF-α, also suppressing IFN-γ production. Both are approved for CD and UC. Certolizumab pegol and golimumab are additional anti-TNF mAbs approved for CD and UC, respectively. Mirikizumab targets IL-23 and is approved for moderate-to-severe UC [
3,
4]. Ustekinumab blocks the shared p40 subunit of IL-12 and IL-23 and is used in moderate-to-severe CD. Risankizumab, brazikumab, and guselkumab selectively inhibit IL-23 and are used in CD management [
4]. Vedolizumab, an anti-α4β7 integrin mAb, blocks lymphocyte trafficking to the gut by preventing binding to mucosal addressing cell adhesion molecule-1 (MAdCAM-1), thereby reducing inflammation. It is approved for induction and maintenance of remission in both UC and CD [
3,
4].
Tofacitinib is a JAK1/3 inhibitor approved for UC. Upadacitinib, a selective JAK1 inhibitor, is approved for both CD and UC. Two sphingosine-1-phosphate (S1P) receptor modulators, ozanimod (selective for S1P1 and S1P5) and etrasimod (selective for S1P1, S1P4, and S1P5) are approved for UC [
5].
As patients with IBD live longer and receive increasingly diverse therapies, malignancies may reflect aging, chronic inflammation, disease phenotype, surveillance intensity, smoking, prior immunosuppressive exposure, or treatment effects. IBD itself increases colorectal cancer risk, particularly with longer disease duration, greater colonic extent, persistent inflammation, primary sclerosing cholangitis, and previous dysplasia. These background risks must be distinguished from malignancy potentially attributable to therapy. This review systematically evaluates malignancy risk associated with biologic, advanced small-molecule, and thiopurine therapies in adults with IBD. Thiopurines were included because they remain important comparator exposures and are central to the interpretation of combination anti-TNF therapy.
2. Methods
This systematic review was conducted following the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) guidelines (
Figure 1) [
6].
The protocol was not prospectively registered. This omission is acknowledged as a methodological limitation because prospective registration reduces the risk of selective methodological changes and outcome reporting. The review question, eligibility criteria, and analytic framework are therefore reported explicitly below to improve transparency.
PubMed, Embase, the Cochrane Library, and Web of Science were searched from database inception through June 2025. Google Scholar and reference lists of relevant reviews and eligible studies were used for supplementary screening only. The search was restricted to English-language publications. The original search was conducted using the concepts and terms reported below; however, the exact database-specific search strings were not prospectively archived. We therefore report the search methodology transparently without retrospectively presenting reconstructed strings as the exact historical searches. Pharmacovigilance and regulatory safety databases were not systematically searched and were not eligible evidence sources for the systematic review.
The search combined controlled vocabulary and free-text terms for the population (“inflammatory bowel disease,” “Crohn disease,” and “ulcerative colitis”), exposures (anti-TNF agents, vedolizumab, ustekinumab, selective IL-23 inhibitors, JAK inhibitors, S1P receptor modulators, thiopurines, and combination therapy), and outcomes (“malignancy,” “cancer,” “lymphoma,” and “non-melanoma skin cancer”). Database-specific syntax was adapted for each platform.
Eligible studies included randomized controlled trials and prospective or retrospective cohort studies evaluating malignancy outcomes in adults with IBD receiving anti-TNF agents, anti-integrin therapies, anti-IL-12/23 or selective IL-23 inhibitors, JAK inhibitors, S1P receptor modulators, thiopurine monotherapy, or anti-TNF/thiopurine combination therapy. Thiopurines were included because they are clinically important comparators and materially modify the interpretation of combination-therapy risk. Existing meta-analyses, guidelines, prescribing information, and non-IBD datasets were not counted as included primary studies; when cited, they were identified as contextual evidence.
Case reports, case series with fewer than 10 patients, pediatric-only studies, conference abstracts without full-text availability, narrative reviews, editorials, and non-English publications were excluded from the primary systematic review. Conference abstracts were excluded even when they reported long-term extension data unless a full report meeting eligibility criteria was available. Pharmacovigilance and regulatory safety databases were not systematically searched.
Two reviewers independently screened titles and abstracts, followed by full-text review of potentially relevant studies. Disagreements were resolved by discussion and consensus.
Two reviewers independently extracted study design, publication year, geographic setting, population, sample size, follow-up duration, therapeutic exposure, comparator, malignancy outcome definition, absolute event counts or incidence rates when available, effect estimates with confidence intervals, and major adjusted covariates. Disagreements were resolved by consensus. Effect measures—including HRs, aHRs, RRs, IRRs, ORs, and SIRs—were retained as reported and were not treated as directly interchangeable.
A de novo quantitative meta-analysis was not performed because eligible studies differed substantially in exposure definitions, comparator groups, malignancy outcomes, effect measures, follow-up duration, and patient risk profiles, precluding a clinically coherent common estimand. A qualitative synthesis was therefore conducted by drug class and malignancy type. Pooled estimates from previously published meta-analyses are reported only as contextual evidence and were not generated by the present review.
2.1. Review Question and PECO Framework
Population: adults (≥18 years) with Crohn disease or ulcerative colitis. Exposure: biologic therapy, advanced small-molecule therapy, thiopurine monotherapy, or anti-TNF/thiopurine combination therapy. Comparator: unexposed IBD populations, alternative IBD therapies, monotherapy comparators, or background population rates. Outcomes: incident overall and site-specific malignancies, including lymphoma, NMSC, hematologic malignancy, urinary tract cancer, and recurrent or new cancer among patients with previous malignancy. The primary systematic-review evidence base was restricted to eligible primary IBD studies; meta-analyses, non-IBD datasets, and guidelines were used only for contextual comparison, pharmacovigilance/biological plausibility, and clinical framing, respectively.
2.2. Risk-of-Bias Assessment
Observational studies were assessed with the Newcastle–Ottawa Scale, including selection, comparability, outcome assessment, and adequacy of follow-up. Randomized trials were assessed using standard Cochrane risk-of-bias domains. Assessments were performed independently by two reviewers and resolved by consensus (
Figure 2). These judgments were considered when interpreting certainty, particularly for rare outcomes and observational comparisons vulnerable to confounding by indication, channeling bias, exposure misclassification, surveillance bias, immortal time bias, and residual confounding.
4. Discussion
This systematic review found substantial variation in the strength and nature of malignancy signals across IBD therapies. Thiopurines showed the most consistent associations with malignancy, particularly lymphoma, non-melanoma skin cancer, urinary tract cancer, and selected myeloid malignancies, while combination anti-TNF plus thiopurine therapy showed the strongest lymphoma signal [
7,
8,
9,
10,
11,
12,
13,
17,
18,
19,
20,
21]. In contrast, anti-TNF monotherapy was not consistently associated with an increase in overall malignancy, although a modest lymphoma signal was reported in some datasets [
8,
14,
15,
16,
20]. Available data for vedolizumab and ustekinumab, including cohorts of patients with previous malignancy, have not demonstrated an increased risk, but confidence is limited by observational study designs, small event numbers, heterogeneous cancer histories, and limited follow-up [
22,
23,
24,
25,
26,
27,
28,
29]. Evidence for selective IL-23 inhibitors, JAK inhibitors, and S1P receptor modulators remains less mature, and the absence of a current signal should not be interpreted as established long-term safety [
30,
31,
32,
33,
34,
35,
36,
37,
38,
39].
Interpretation of these findings requires consideration of both absolute and relative risk. In the CESAME cohort, thiopurine exposure was associated with a lymphoproliferative disorder incidence of 0.90 per 1000 patient-years compared with 0.26 per 1000 patient-years among never-users, despite a substantially larger relative hazard estimate [
7]. By contrast, the TREAT registry reported nearly identical overall malignancy rates with and without infliximab (0.69 vs. 0.71 per 100 patient-years) [
15]. HSTCL illustrates the same principle: the association is clinically important, particularly in young men with prolonged thiopurine exposure, but the event remains rare in absolute terms [
40,
41]. Relative estimates should therefore be interpreted alongside event counts or incidence rates when available, and different measures of association should not be treated as directly comparable.
Previous malignancy should not be treated as a homogeneous risk state. Active, recent, remote, recurrent, and new primary cancers have different clinical implications, and a remote basal cell carcinoma is not equivalent to a recently treated melanoma, lymphoma, colorectal cancer, or other solid-organ malignancy. Available cohorts frequently combine these categories and include relatively few cancer events; their findings should therefore be interpreted according to cancer type, interval since treatment, recurrence risk, and multidisciplinary oncology input [
26,
27,
28,
29].
The ORAL Surveillance malignancy signal should not be dismissed as irrelevant to IBD. It is particularly relevant to older patients, current or former smokers, and patients with cardiovascular or prior malignancy risk factors [
42]. The trial also identified broader safety concerns, including major adverse cardiovascular events and mortality [
42]. Although the same malignancy signal has not been clearly reproduced in IBD-specific datasets, a susceptible-subgroup or latency-dependent class effect remains possible, and continued long-term surveillance is warranted.
Available S1P receptor modulator data show low malignancy event rates, but follow-up remains limited relative to the latency of many cancers [
35,
36,
37,
38,
39]. Current evidence, therefore, does not establish long-term malignancy safety, and continued post-marketing surveillance is required.