Known Vulnerabilities for products from Getgrav
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Getgrav".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65896 json | Not Provided | 2026-07-23 | 2026-07-23 | |
| CVE-2026-62387 json | Not Provided | 2026-07-17 | 2026-07-17 | |
| CVE-2026-62386 json | Not Provided | 2026-07-17 | 2026-07-23 | |
| CVE-2026-62231 json | Not Provided | 2026-07-17 | 2026-07-21 | |
| CVE-2026-61457 json | Not Provided | 2026-07-15 | 2026-07-15 | |
| CVE-2026-61456 json | Not Provided | 2026-07-10 | 2026-07-10 | |
| CVE-2026-61454 json | Not Provided | 2026-07-11 | 2026-07-13 | |
| CVE-2026-61452 json | Not Provided | 2026-07-15 | 2026-07-15 | |
| CVE-2026-59193 json | Grav is a file-based Web platform. Prior to 2.0.0, an authenticated admin.super user can crash Grav or fill the disk by uploa... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-58655 json | Not Provided | 2026-07-15 | 2026-07-15 | |
| CVE-2026-58654 json | Not Provided | 2026-07-08 | 2026-07-08 | |
| CVE-2026-44738 json | Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages rol... | Not Provided | 2026-05-11 | 2026-05-14 |
| CVE-2026-42844 json | Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abu... | Not Provided | 2026-05-12 | 2026-05-19 |
| CVE-2026-42843 json | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration... | Not Provided | 2026-05-11 | 2026-05-27 |
| CVE-2026-42841 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an e... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42612 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav a... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42611 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42610 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update pe... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42609 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low... | Not Provided | 2026-05-11 | 2026-05-14 |
| CVE-2026-42608 json | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulnerability within the FormFlash core c... | Not Provided | 2026-05-11 | 2026-05-13 |