Grav vulnerabilities
We track 1 vulnerability in Grav products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Grav vulnerabilities
- 9.8 Critical severity
Grav: Improper Neutralization of Special Elements used in an OS Command
Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Session - deserialize untrusted data without restricting allowed classes, enabling P