{"api_version":"v1","generated_at":"2026-10-08T12:40:00+00:00","product":{"cve_count":148,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-getgrav-grav-1f985ede8ae4","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/grav","name":"Grav","next_cursor":"djE6NTA","observations":[{"affected":"grav: < 2.0.25","affected_versions_present":true,"cve_id":"CVE-2026-100671","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100671","fixed":"grav: 2.0.25","last_modified":"2026-09-28T18:12:07.848Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-pp89-h475-7gj6","primary_source":"","published":"2026-09-26T13:23:35.451Z"},{"affected":"grav: < 2.0.25","affected_versions_present":true,"cve_id":"CVE-2026-100670","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100670","fixed":"grav: 2.0.25","last_modified":"2026-09-30T14:57:47.995Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-mwjj-r7vm-pgqm","primary_source":"","published":"2026-09-26T13:23:34.756Z"},{"affected":"grav: < 2.0.25","affected_versions_present":true,"cve_id":"CVE-2026-100669","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100669","fixed":"grav: 2.0.25","last_modified":"2026-09-30T20:11:12.856Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-pg8v-xw58-frq8","primary_source":"","published":"2026-09-26T13:23:34.082Z"},{"affected":"grav: < 2.0.25","affected_versions_present":true,"cve_id":"CVE-2026-100668","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100668","fixed":"grav: 2.0.25","last_modified":"2026-09-28T16:31:25.182Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-59qm-58v5-gvc5","primary_source":"","published":"2026-09-26T13:23:33.382Z"},{"affected":"grav: 3.8.7 < 3.9.7","affected_versions_present":true,"cve_id":"CVE-2026-100667","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100667","fixed":"grav: 3.9.7","last_modified":"2026-09-28T18:14:51.902Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-636m-8598-45r9","primary_source":"","published":"2026-09-26T13:23:32.685Z"},{"affected":"grav: 2.0.0-rc.1 < 2.0.22","affected_versions_present":true,"cve_id":"CVE-2026-92917","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92917","fixed":"grav: 2.0.22","last_modified":"2026-09-19T02:16:41.341Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-rfr9-7h4p-gx2x","primary_source":"","published":"2026-09-17T11:16:45.044Z"},{"affected":"grav: 2.0.0 \u2264 2.0.21, 1.7.0 \u2264 1.7.53.2","affected_versions_present":true,"cve_id":"CVE-2026-92916","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92916","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-30T17:20:34.882Z","patch_url":"","primary_source":"","published":"2026-09-17T11:16:44.357Z"},{"affected":"Grav: 1.7.50.2","affected_versions_present":true,"cve_id":"CVE-2025-64059","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-64059","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T18:19:51.712Z","patch_url":"","primary_source":"","published":"2026-09-13T00:00:00.000Z"},{"affected":"< 2.0.20","affected_versions_present":true,"cve_id":"CVE-2026-86197","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-86197","fixed":"2.0.20","last_modified":"2026-09-10T15:04:57.494Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-8hgv-xc77-jmcr","primary_source":"","published":"2026-09-05T12:09:10.147Z"},{"affected":"< 2.0.18","affected_versions_present":true,"cve_id":"CVE-2026-85604","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85604","fixed":"2.0.18","last_modified":"2026-09-08T16:28:18.434Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-p6qj-p5m7-f62h","primary_source":"","published":"2026-09-04T11:30:05.453Z"},{"affected":"grav: < 1.10.55","affected_versions_present":true,"cve_id":"CVE-2026-85603","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85603","fixed":"grav: 1.10.55","last_modified":"2026-09-14T19:33:09.961Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-h9g9-73c3-23c9","primary_source":"","published":"2026-09-04T11:30:04.799Z"},{"affected":"< 2.0.20","affected_versions_present":true,"cve_id":"CVE-2026-85601","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85601","fixed":"2.0.20","last_modified":"2026-09-10T15:09:23.934Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-752r-88j4-vxm3","primary_source":"","published":"2026-09-04T11:30:03.468Z"},{"affected":"grav: 2.0.0 \u2264 2.0.17","affected_versions_present":true,"cve_id":"CVE-2026-85598","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85598","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-14T19:33:10.133Z","patch_url":"","primary_source":"","published":"2026-09-04T11:30:01.461Z"},{"affected":"< 1.0.18","affected_versions_present":true,"cve_id":"CVE-2026-80204","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80204","fixed":"1.0.18","last_modified":"2026-08-26T12:03:55.898Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-mcx6-4rvg-7r8v","primary_source":"","published":"2026-08-26T10:28:13.671Z"},{"affected":"< 1.0.18","affected_versions_present":true,"cve_id":"CVE-2026-80203","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-80203","fixed":"1.0.18","last_modified":"2026-08-28T22:48:35.508Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-94q7-vrqr-cx5v","primary_source":"","published":"2026-08-26T10:28:12.996Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-76846","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76846","fixed":"2.0.16","last_modified":"2026-08-27T14:55:30.423Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-xjw5-q542-3vmr","primary_source":"","published":"2026-08-25T01:30:31.891Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-76839","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76839","fixed":"2.0.16","last_modified":"2026-08-25T15:45:24.322Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-3jhr-mxmx-38cx","primary_source":"","published":"2026-08-25T01:30:31.050Z"},{"affected":"< 4.2.2","affected_versions_present":true,"cve_id":"CVE-2026-75574","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75574","fixed":"4.2.2","last_modified":"2026-08-27T16:46:04.470Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-gh8j-q67c-j53f","primary_source":"","published":"2026-08-25T01:30:26.910Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72702","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72702","fixed":"2.0.16","last_modified":"2026-08-28T17:52:31.939Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-9ccq-2jfg-qw33","primary_source":"","published":"2026-08-25T01:30:25.032Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72701","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72701","fixed":"2.0.16","last_modified":"2026-08-27T14:54:28.112Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-38p6-h87p-r4cg","primary_source":"","published":"2026-08-25T01:30:23.965Z"},{"affected":"grav: < 3.9.1","affected_versions_present":true,"cve_id":"CVE-2026-72700","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72700","fixed":"grav: 3.9.1","last_modified":"2026-08-25T17:25:36.693Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-x239-6jqx-5hjh","primary_source":"","published":"2026-08-25T01:30:22.914Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72698","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72698","fixed":"2.0.16","last_modified":"2026-08-26T16:12:36.558Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-p597-crqc-m349","primary_source":"","published":"2026-08-25T01:30:21.127Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72697","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72697","fixed":"2.0.16","last_modified":"2026-08-25T18:01:46.215Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-47ch-6w46-6xm7","primary_source":"","published":"2026-08-25T01:30:18.001Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72696","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72696","fixed":"2.0.16","last_modified":"2026-08-27T14:52:18.096Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-q8w8-6cq5-j4h2","primary_source":"","published":"2026-08-25T01:30:14.848Z"},{"affected":"< 2.0.16","affected_versions_present":true,"cve_id":"CVE-2026-72695","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72695","fixed":"2.0.16","last_modified":"2026-08-25T17:38:09.024Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-jq29-c7v8-rg55","primary_source":"","published":"2026-08-25T01:30:11.868Z"},{"affected":"< 1.0.16","affected_versions_present":true,"cve_id":"CVE-2026-56710","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56710","fixed":"1.0.16","last_modified":"2026-08-25T15:28:35.494Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-985r-mpj8-5rqw","primary_source":"","published":"2026-08-25T01:30:11.042Z"},{"affected":"< 3.9.2","affected_versions_present":true,"cve_id":"CVE-2026-56709","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56709","fixed":"3.9.2","last_modified":"2026-08-26T16:12:46.333Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-69vf-mjxw-x79j","primary_source":"","published":"2026-08-25T01:30:10.057Z"},{"affected":"< 1.0.16","affected_versions_present":true,"cve_id":"CVE-2026-56708","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56708","fixed":"1.0.16","last_modified":"2026-08-25T18:07:04.185Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-hq2v-cgw4-fw2w","primary_source":"","published":"2026-08-25T01:30:08.721Z"},{"affected":"< 1.4.8","affected_versions_present":true,"cve_id":"CVE-2026-56707","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56707","fixed":"1.4.8","last_modified":"2026-08-27T14:50:54.881Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-x929-528m-vx2m","primary_source":"","published":"2026-08-25T01:30:06.601Z"},{"affected":"< 2.0.7","affected_versions_present":true,"cve_id":"CVE-2026-64850","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-64850","fixed":"2.0.7.","last_modified":"2026-08-19T17:51:53.967Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-fj2p-qj2f-74v5","primary_source":"","published":"2026-08-19T15:58:02.850Z"},{"affected":"< 2.0.4","affected_versions_present":true,"cve_id":"CVE-2026-62673","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62673","fixed":"2.0.4.","last_modified":"2026-08-21T19:37:41.694Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-vwg3-w8w3-pc79","primary_source":"","published":"2026-08-19T15:46:59.472Z"},{"affected":"< 2.0.4","affected_versions_present":true,"cve_id":"CVE-2026-62672","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62672","fixed":"2.0.4.","last_modified":"2026-08-19T18:00:39.622Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-37f3-6p89-6qr9","primary_source":"","published":"2026-08-19T15:44:36.287Z"},{"affected":"< 2.0.4; < 3.8.11","affected_versions_present":true,"cve_id":"CVE-2026-62669","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62669","fixed":"3.8.11.","last_modified":"2026-08-19T18:18:46.380Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-7mgc-c7pq-3rr3","primary_source":"","published":"2026-08-19T15:40:03.252Z"},{"affected":"< 2.0.4; < 1.0.6","affected_versions_present":true,"cve_id":"CVE-2026-62668","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62668","fixed":"1.0.6.","last_modified":"2026-08-19T18:44:04.914Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-58q8-f7v4-w2vf","primary_source":"","published":"2026-08-19T15:29:24.452Z"},{"affected":"< 2.0.2","affected_versions_present":true,"cve_id":"CVE-2026-61842","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61842","fixed":"2.0.2.","last_modified":"2026-08-19T18:18:54.336Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-mc5q-6hpj-rp7j","primary_source":"","published":"2026-08-19T15:23:27.038Z"},{"affected":"< 2.0.1","affected_versions_present":true,"cve_id":"CVE-2026-61690","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61690","fixed":"2.0.1.","last_modified":"2026-08-25T02:07:51.415Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-928x-9mpw-8h56","primary_source":"","published":"2026-08-19T15:20:10.966Z"},{"affected":"< 3.8.5","affected_versions_present":true,"cve_id":"CVE-2026-53654","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-53654","fixed":"3.8.5.","last_modified":"2026-08-19T15:42:49.046Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-wwcc-xxhc-44j6","primary_source":"","published":"2026-08-19T15:15:30.263Z"},{"affected":"< 2.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75837","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75837","fixed":"2.0.14","last_modified":"2026-08-19T14:22:08.426Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx","primary_source":"","published":"2026-08-18T11:19:47.200Z"},{"affected":"< 1.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75836","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75836","fixed":"1.0.14","last_modified":"2026-08-18T14:45:43.674Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-8mjx-xjfv-9c88","primary_source":"","published":"2026-08-18T11:19:46.463Z"},{"affected":"< 1.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75835","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75835","fixed":"1.0.14","last_modified":"2026-08-18T15:10:06.230Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-p57v-xhv3-mf2w","primary_source":"","published":"2026-08-18T11:19:45.775Z"},{"affected":"< 2.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75834","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75834","fixed":"2.0.14","last_modified":"2026-08-18T13:36:10.448Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-q2j8-x8hf-63ch","primary_source":"","published":"2026-08-18T11:19:45.094Z"},{"affected":"< 1.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75833","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75833","fixed":"1.0.14","last_modified":"2026-08-18T13:42:25.284Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-x72c-4jc4-8rh6","primary_source":"","published":"2026-08-18T11:19:44.425Z"},{"affected":"< 1.0.14","affected_versions_present":true,"cve_id":"CVE-2026-75832","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75832","fixed":"1.0.14","last_modified":"2026-08-19T14:21:09.712Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-435x-66r2-jwv2","primary_source":"","published":"2026-08-18T11:19:43.757Z"},{"affected":"< 2.0.15","affected_versions_present":true,"cve_id":"CVE-2026-75831","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75831","fixed":"2.0.15","last_modified":"2026-08-18T13:55:32.341Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97","primary_source":"","published":"2026-08-18T11:19:43.062Z"},{"affected":"< 1.0.15","affected_versions_present":true,"cve_id":"CVE-2026-75830","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75830","fixed":"1.0.15","last_modified":"2026-08-18T15:09:11.660Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-g6j3-8jv9-ch5f","primary_source":"","published":"2026-08-18T11:19:42.375Z"},{"affected":"< 1.0.15","affected_versions_present":true,"cve_id":"CVE-2026-75829","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75829","fixed":"1.0.15","last_modified":"2026-08-18T13:36:16.104Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-w94c-jmg4-w4c9","primary_source":"","published":"2026-08-18T11:19:41.673Z"},{"affected":"< 2.0.15","affected_versions_present":true,"cve_id":"CVE-2026-75828","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75828","fixed":"2.0.15","last_modified":"2026-08-18T13:45:54.239Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-vfmf-q6x9-cw96","primary_source":"","published":"2026-08-18T11:19:41.001Z"},{"affected":"< 2.0.15","affected_versions_present":true,"cve_id":"CVE-2026-75827","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75827","fixed":"2.0.15","last_modified":"2026-08-19T14:12:40.407Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-f8wv-xp27-6gq7","primary_source":"","published":"2026-08-18T11:19:40.317Z"},{"affected":"grav: < 9.1.19","affected_versions_present":true,"cve_id":"CVE-2026-75107","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-75107","fixed":"grav: 9.1.19","last_modified":"2026-09-24T14:19:20.153Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-5jrr-wfgh-mhg9","primary_source":"","published":"2026-08-18T11:19:39.644Z"},{"affected":"< 1.0.15","affected_versions_present":true,"cve_id":"CVE-2026-74908","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-74908","fixed":"1.0.15","last_modified":"2026-08-18T15:08:29.903Z","patch_url":"https://github.com/getgrav/grav/security/advisories/GHSA-66xf-ggf4-6hmc","primary_source":"","published":"2026-08-18T11:19:38.977Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"getgrav"}}