Known vulnerabilities in Grav CMS 2.0.10

Vendor: Grav CMS
Software: Grav CMS
Version: 2.0.10
Software CPE: cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grav CMS version 2.0.10 Grav CMS 2.0.10 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138922 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
2.0.11 21.07.2026 SB2026072199
#VU138919 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
Public exploit available
No
2.0.11 21.07.2026 SB2026072199