Login Request a demo
GR
Product
Grav
by Grav · last CVE Jul 8, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 0Medium 4Low 0
Severity
All severities5Critical1High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Grav to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56700
9.8
3%
Jun 30
Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection
Affected: before 2.0.0-beta.2
CVE-2026-56701
6.5
0%
Jun 23
Grav - XML External Entity Injection via SVG Upload
Affected: before 2.0.0-beta.2
CVE-2020-37256
5.4
0%
Jun 25
Grav - Cross-Site Scripting in Admin Plugin Page Editor
Affected: before 1.6.30
CVE-2026-58657
4.8
0%
Jul 8
Grav - Stored CSS Injection via Markdown Image resize() Action
Affected: 2.0.0-rc.9 before 2.0.0
CVE-2026-58654
4.3
0%
Jul 8
Grav - Arbitrary File Upload via Avatar Endpoint
Affected: before 1.0.1
Showing 5