Getgrav Grav vulnerabilities
57 published vulnerabilities in Getgrav Grav. The most were published in 2025 (20), and 10 so far in 2026.
Getgrav Grav vulnerabilities by year
2020
2021
2022
2023
2024
2025
2026
Most exploited Getgrav Grav vulnerabilities
- CVE-2023-34251 Grav Server Side Template Injection vulnerability
- CVE-2025-46199 Cross-site scripting in n/a
- CVE-2021-47812 GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)
- CVE-2025-66844 Grav may be vulnerable to SSRF attack via Twig Templates
- CVE-2022-2073 Code Injection in getgrav/grav
- CVE-2026-42611 Grav: Stored XSS via Tag Injection
- CVE-2026-42608 Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.
- CVE-2025-66295 Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption
- CVE-2025-66296 Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover
- CVE-2025-66299 Security Sandbox Bypass with SSTI (Server Side Template Injection) in the Grav CMS
- CVE-2025-46198 Cross-site scripting in n/a
- CVE-2024-27921 Grav File Upload Path Traversal vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.