Detections
Analytics

SCA: security update for getgrav/grav (GHSA-vj8j-973f-r65j)

high Tenable Cloud Security Plugin ID 448047

Description

Duplicate Advisory: Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure

Solution

There is no known solution at this time.

See Also

https://github.com/advisories/GHSA-vj8j-973f-r65j

Plugin Details

Severity: High

ID: 448047

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 9/17/2026

Updated: 9/17/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/3/2026

Vulnerability Publication Date: 8/3/2026

Reference Information

cwe: CWE-94