getgrav/grav
Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS
Security Advisories for getgrav/grav in packagist
High
26 days ago
Grav CMS vulnerable to remote code execution via .zip file upload
packagist
getgrav/grav
High
26 days ago
Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin
packagist
getgrav/grav
Moderate
26 days ago
Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate
packagist
getgrav/grav
Critical
26 days ago
Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write
packagist
getgrav/grav
Critical
26 days ago
Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS
packagist
getgrav/grav
High
26 days ago
Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)
packagist
getgrav/grav
High
26 days ago
Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
packagist
getgrav/grav
High
26 days ago
Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content
packagist
getgrav/grav
High
26 days ago
Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()
packagist
getgrav/grav
High
26 days ago
Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths
packagist
getgrav/grav
Low
26 days ago
Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection
packagist
getgrav/grav
Low
26 days ago
Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match
packagist
getgrav/grav
Moderate
27 days ago
Grav: Stored XSS via Markdown audio/video media <source> URL
packagist
getgrav/grav
Moderate
27 days ago
Grav: Stored XSS via quoted-attribute bypass in detectXss
packagist
getgrav/grav
High
27 days ago
Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images
packagist
getgrav/grav
High
27 days ago
Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure
packagist
getgrav/grav
High
27 days ago
Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation
packagist
getgrav/grav
Moderate
27 days ago
Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer
packagist
getgrav/grav
Moderate
27 days ago
Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav
packagist
getgrav/grav
Moderate
27 days ago
Grav: XSS Blueprint Validation Bypass via Twig String Concatenation
packagist
getgrav/grav
Moderate
27 days ago
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
packagist
getgrav/grav
High
about 1 month ago
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits
packagist
getgrav/grav
High
about 1 month ago
Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()
packagist
getgrav/grav
Moderate
about 1 month ago
Grav: Authenticated ReDoS via regex_replace in Twig Sandbox
packagist
getgrav/grav
Moderate
about 2 months ago
Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin
packagist
getgrav/grav
High
about 2 months ago
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
packagist
getgrav/grav
High
2 months ago
Grav: Unauthenticated denial of service via unbounded image derivative dimensions
packagist
getgrav/grav
Moderate
4 months ago
Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr
packagist
getgrav/grav
Moderate
4 months ago
Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets
packagist
getgrav/grav
High
5 months ago
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()
packagist
getgrav/grav
Moderate
5 months ago
Grav: Stored XSS via page title (data[header][title]) in admin panel
packagist
getgrav/grav
High
5 months ago
Low-privileged Grav API users can create super-admin accounts via blueprint-upload
packagist
getgrav/grav
High
5 months ago
Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component
packagist
getgrav/grav
High
5 months ago
Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic
packagist
getgrav/grav
Critical
5 months ago
Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass
packagist
getgrav/grav
High
5 months ago
Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes
packagist
getgrav/grav
Moderate
5 months ago
Grav Vulnerable to Sensitive Information Disclosure via Accounts Service Bypass
packagist
getgrav/grav
Critical
5 months ago
Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access
packagist
getgrav/grav
Moderate
5 months ago
Grav Vulnerable to XSS via Taxonomy Field Values in Admin Panel
packagist
getgrav/grav
Moderate
5 months ago
Grav CMS vulnerable to stored XSS via Markdown media attribute() action
packagist
getgrav/grav
Critical
5 months ago
Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature
packagist
getgrav/grav
Moderate
10 months ago
Grav is vulnerable to Stored XSS through authenticated user-edited content
packagist
getgrav/grav
Critical
10 months ago
Grav may be vulnerable to SSRF attack via Twig Templates
packagist
getgrav/grav
Moderate
11 months ago
Grav CMS is vulnerable to Cross Site Scripting (XSS) in the page editor
packagist
getgrav/grav
High
11 months ago
Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms
packagist
getgrav/grav
High
11 months ago
Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass
packagist
getgrav/grav
Moderate
11 months ago
Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` parameter `data[header][template]` in Advanced Tab
packagist
getgrav/grav
Moderate
11 months ago
Grav is vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab
packagist
getgrav/grav
High
11 months ago
Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection
packagist
getgrav/grav
Moderate
11 months ago
Grav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/config/site` parameter `data[taxonomies]`
packagist
getgrav/grav
High
11 months ago
Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption
packagist
getgrav/grav
High
11 months ago
Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter
packagist
getgrav/grav
Moderate
11 months ago
Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel
packagist
getgrav/grav
Moderate
11 months ago
Grav vulnerable to Path Traversal allowing server files backup
packagist
getgrav/grav
Moderate
11 months ago
Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure
packagist
getgrav/grav
Moderate
11 months ago
Grav Admin Plugin is vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`
packagist
getgrav/grav
Moderate
11 months ago
Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` in Multiples parameters
packagist
getgrav/grav
Moderate
11 months ago
Grav Exposes Password Hashes Leading to privilege escalation
packagist
getgrav/grav
High
11 months ago
Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions
packagist
getgrav/grav
High
11 months ago
Grav is Vulnerable to Security Sandbox Bypass with SSTI (Server Side Template Injection)
packagist
getgrav/grav
High
11 months ago
Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover
packagist
getgrav/grav
High
over 2 years ago
Grav Vulnerable to Arbitrary File Read to Account Takeover
packagist
getgrav/grav
High
over 2 years ago
Server Side Template Injection (SSTI) via Twig escape handler
packagist
getgrav/grav
High
over 2 years ago
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
packagist
getgrav/grav
High
over 2 years ago
Remote Code Execution by uploading a phar file using frontmatter
packagist
getgrav/grav
High
about 3 years ago
grav Server-side Template Injection (SSTI) mitigation bypass
packagist
getgrav/grav
High
over 3 years ago
Grav Server-side Template Injection (SSTI) via Twig Default Filters
packagist
getgrav/grav
High
over 3 years ago
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
packagist
getgrav/grav
High
over 3 years ago
Grav Server-side Template Injection (SSTI) via Twig Default Filters
packagist
getgrav/grav
Critical
over 3 years ago
Grav Server Side Template Injection (SSTI) vulnerability
packagist
getgrav/grav
Moderate
about 5 years ago
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
packagist
getgrav/grav
High
over 5 years ago
Grav's Twig processing allowing dangerous PHP functions by default
packagist
getgrav/grav