Trilby Media vulnerabilities
We track 1 vulnerability in Trilby Media products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Trilby Media vulnerabilities
- 7.3 High severity
grav-plugin-scheduler-webhook: Incorrect Implementation of Authentication Algorithm
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so an unauthenticated rem