https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:20:32.863489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263637 EUVD-2026-263637 2026-10-22T19:20:32.865810+00:00 EUVD-2026-263637 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66844 fkie_cve-2025-66844 2026-10-22T19:20:32.865852+00:00

In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered

 https://cve.radiocsirt.org/vuln/ghsa-729w-j79f-2c34 GHSA-729w-j79f-2c34 — Grav may be vulnerable to SSRF attack via Twig Templates 2026-10-22T19:20:32.865899+00:00

Affected: Packagist: getgrav/grav

In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered.