PKSA-87p7-31n6-n4f3 Security Advisory
-
[HIGH] Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption
PKSA-87p7-31n6-n4f3 CVE-2025-66295 GHSA-h756-wh59-hhjv
Affected package: getgrav/grav
Affected version: <1.8.0-beta.27
Reported by:
GitHub