EUVD-2026-60591

Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits errorlog, giving arbitrary file write...

PT-2026-76927

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.15 Description An arbitrary file write issue exists in the Blueprint dynamic-data bare-function validation due to the use of an incomplete denylist instead of a positive allowlist. Users with page-edit or...