Packagist/j0k3r/graby: low

Graby has stored XSS via iframe srcdoc Attribute in htmLawed Sanitization Config

Action: Upgrade j0k3r/graby to 2.5.1 or later.

composer require j0k3r/graby:2.5.1

Affected

Fixed versions

Sources

• osv: GHSA-3h6j-9x8m-rg3g
• https://github.com/j0k3r/graby/security/advisories/GHSA-3h6j-9x8m-rg3g
• https://github.com/j0k3r/graby/commit/0295d828822f7a59c5751a8199973a4f965a99b0
• https://github.com/j0k3r/graby
• https://github.com/j0k3r/graby/releases/tag/2.5.1

published 2026-03-31T23:12:36Z · modified 2026-03-31T23:32:26.906898Z · JSON