CVE-2026-58657
1 advisory.
Packagist/getgrav/grav CVE-2026-58657: medium 4.8
Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav
Action: Upgrade getgrav/grav to 2.0.0 or later.
composer require getgrav/grav:2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-rc.9 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-ffmg-hfvg-jhg9
- https://github.com/getgrav/grav/security/advisories/GHSA-ffmg-hfvg-jhg9
- https://nvd.nist.gov/vuln/detail/CVE-2026-58657
- https://github.com/getgrav/grav/commit/6582166173bb8eb5869d96aea384e0e73777c94c
- https://github.com/getgrav/grav/commit/e03d29aa0d3ece16d73c1ffccfa78df8bf5f28b8
- https://github.com/getgrav/grav
- https://www.vulncheck.com/advisories/grav-stored-css-injection-via-markdown-image-resize-action
CVE-2026-58657 · published · modified · JSON