Packagist/getgrav/grav CVE-2025-66300: high 8.5, EPSS 0.45%

Grav is vulnerable to Arbitrary File Read

Action: Upgrade getgrav/grav to 1.8.0-beta.27 or later.

composer require getgrav/grav:1.8.0-beta.27

Affected

Fixed versions

Sources

• osv: GHSA-p4ww-mcp9-j6f2
• https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2
• https://nvd.nist.gov/vuln/detail/CVE-2025-66300
• https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee
• https://github.com/getgrav/grav

CVE-2025-66300 · published 2025-12-02T00:36:43Z · modified 2026-09-10T03:50:32.019257672Z · JSON