CVE security advisories and vulnerability history for grav by getgrav.
114
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
92
Public exploits
PoC or exploit code
7.3
Avg CVSS
2018–2026
Last updated
Overview
getgrav grav has 114 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 92 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting getgrav grav, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of getgrav grav's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical12
High56
Medium42
Low4
In CISA’s Known Exploited Vulnerabilities catalog
0
None of getgrav grav's CVEs are currently listed in CISA's KEV catalog.
Public exploits
92
92 of getgrav grav's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every getgrav grav version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about getgrav grav vulnerabilities.
How many CVEs does getgrav grav have?
getgrav grav has 114 published CVE records since 2018.
How many getgrav grav CVEs are in CISA KEV?
None of getgrav grav's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for getgrav grav vulnerabilities?
Yes — 92 of getgrav grav's CVEs have a known public exploit.
Which versions of getgrav grav are affected?
523 distinct getgrav grav versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in getgrav grav CVEs?
getgrav grav's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-862 (Missing Authorization).
How many critical getgrav grav vulnerabilities are there?
getgrav grav has 12 critical and 56 high-severity CVEs.
What is the average severity of getgrav grav CVEs?
The average CVSS base score across getgrav grav's scored CVEs is 7.3.
