- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/19/2026, grav recorded 77 security vulnerabilities in the last 90 days, of which 57 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of grav and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-112782Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of ServiceCVE-2026-112781Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ DirectivesCVE-2026-112780Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@CVE-2026-109326Grav before 2.1.7 Information Disclosure via Nested .git DirectoriesCVE-2026-109325Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxy184 Results | Page 1 of 19