Grav vulnerabilities
We track 122 vulnerabilities in Grav products across 8 products. 122 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
122vulnerabilities
16critical
106high
0exploited
8.3average CVSS score
Latest Grav vulnerabilities
- 7.2 High severity
grav: Improper Control of Generation of Code
Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the `GravExtension.filterFilter()` function whereby validation against a denylist of unsafe functions is only performed when the argument passed to filter is a str
- 7.2 High severity
grav: Improper Control of Generation of Code
Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Vers