getgrav

Everything Threat Times has reported about getgrav: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Grav API Plugin Critical Flaw Allows Unauthenticated Disk Exhaustion and Rule Bypass

Threat TimesOct 19, 2026

Researchers identified a critical vulnerability in the Grav API plugin that permits unauthenticated attackers to exhaust server resources or bypass access controls.

Vulnerabilities

Grav CMS Editors Can Trigger File Deletion via Allowlist Bypass in CVE-2026-112780

Threat TimesOct 19, 2026

A critical allowlist bypass in Grav CMS versions prior to 2.2.2 lets page editors invoke dangerous static methods, enabling directory deletion and file manipulation.