CVE-2026-62672 Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

Grav is a file-based Web platform. Prior to 2.0.4, Grav allowlists the regexreplace filter and function in system/config/security.yaml, and GravExtension::regexReplace passes an editor-controlled pattern directly to pregreplace. When security.twigcontent.processenabled is enabled, an authenticate...

CVE-2025-62672

creationtimestamp| type| source ---|---|--- 2025-10-19 03:35:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3jeohl4m72m...