EUVD-2026-97626

Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting...

CVE-2026-109324

Grav versions prior to 2.1.7 are vulnerable to a memory exhaustion denial of service (DoS) vulnerability. The issue occurs when authenticated media authors upload compressed, oversized raster images that lack dimension checks during processing by GD or Imagick libraries. By referencing a Twig or ...