GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

gemstone-source

4 vulnerability records and advisories credit this contributor.

CVE-2026-61451
Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url
CVE-2026-62234
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols
CVE-2026-62237
Grav < 2.0.4 ReDoS via regex_replace in Sandbox
CVE-2026-61453
Grav before 2.0.1 XSS via Twig String Concatenation