trilbymedia
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| grav-plugin-flex-objects | 1 | – | Aug 14, 2026 |
| grav-plugin-git-sync | 1 | – | Oct 12, 2026 |
Exploited and recent CVEs
- CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author 1.2%
- CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects 0.9%