CVE-2026-42843
1 advisory.
Packagist/getgrav/grav-plugin-api CVE-2026-42843: high 8.8
Grav API Privilege Escalation to Super Admin
Action: Upgrade getgrav/grav-plugin-api to 1.0.0-beta.15 or later.
composer require getgrav/grav-plugin-api:1.0.0-beta.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-beta.15 | - |
Fixed versions
| 1.0.0-beta.15 |
Sources
- osv: GHSA-r945-h4vm-h736
- https://github.com/getgrav/grav/security/advisories/GHSA-r945-h4vm-h736
- https://nvd.nist.gov/vuln/detail/CVE-2026-42843
- https://github.com/getgrav/grav-plugin-api/commit/26f529c7d438c73343e82311fb095caeaf1a6116
- https://github.com/getgrav/grav
CVE-2026-42843 · published · modified · JSON