getgrav/grav vulnerabilities

CVEs whose affected-version data names the getgrav/grav package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

31 CVEsRSS

CVE-2026-55890Medium· 4.8

Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

▾ Sunlitgetgrav · getgrav/gravEPSS 0.50%via GHSA

getgrav/grav vulnerabilities (CVEs) — page 2 · VulnSea