CVE-2026-62668

creationtimestamp| type| source ---|---|--- 2026-08-19 18:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdalebxe2p 2026-08-19 19:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthhr5af5y2e...

CVE-2026-62668 Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, the Grav API plugin WebhookController.php accepts webhook URLs after only FILTERVALIDATEURL syntax validation, and WebhookDispatcher.php initializes cURL without CURLOPTPROTOCO...