← All credits

gemstone-source

4 vulnerability records and advisories credit this contributor.

CVE-2026-61451
Grav API Plugin before 1.0.4 Password Reset Token Poisoning via admin_base_url
CVE-2026-62237
Grav < 2.0.4 ReDoS via regex_replace in Sandbox
CVE-2026-61453
Grav before 2.0.1 XSS via Twig String Concatenation
CVE-2026-62234
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols