← All credits
nicl4ssic
8 vulnerability records and advisories credit this contributor.
CVE-2026-69087
Grav Form Plugin before 9.1.13 Open Redirect via form.value() Twig
CVE-2026-62386
Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter
CVE-2026-62231
Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator
CVE-2026-62387
Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin
CVE-2026-62232
Grav < 2.0.4 2FA Bypass via Secret Regeneration
CVE-2026-61454
Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__
CVE-2026-58654
Grav - Arbitrary File Upload via Avatar Endpoint
CVE-2026-58656
Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter