https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:19:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341943 EUVD-2026-341943 https://cve.radiocsirt.org/vuln/euvd-2026-341943 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58655 <p>The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic collection or object titles, the plugin passes user-controlled frontmatter values (page.header.flex.collection.title or page.header.flex.object.title) to Twig&#39;s template_from_string(), causing them to be evaluated as Twig code rather than treated as text. This path bypasses Grav&#39;s Security::cleanDangerousTwig() sanitization. An attacker who can control the title frontmatter of a publicly reachable Flex Objects page can achieve arbitrary Twig execution and escalate to remote command execution via access to internal Grav services such as the scheduler.</p> <p>The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic collection or object titles, the plugin passes user-controlled frontmatter values (page.header.flex.collection.title or page.header.flex.object.title) to Twig&#39;s template_from_string(), causing them to be evaluated as Twig code rather than treated as text. This path bypasses Grav&#39;s Security::cleanDangerousTwig() sanitization. An attacker who can control the title frontmatter of a publicly reachable Flex Objects page can achieve arbitrary Twig execution and escalate to remote command execution via access to internal Grav services such as the scheduler.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58655 https://cve.radiocsirt.org/vuln/ghsa-mpq7-q5x9-rf83 <p>The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic collection or object titles, the plugin passes user-controlled frontmatter values (page.header.flex.collection.title or page.header.flex.object.title) to Twig&#39;s template_from_string(), causing them to be evaluated as Twig code rather than treated as text. This path bypasses Grav&#39;s Security::cleanDangerousTwig() sanitization. An attacker who can control the title frontmatter of a publicly reachable Flex Objects page can achieve arbitrary Twig execution and escalate to remote command execution via access to internal Grav services such as the scheduler.</p> <p>The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic collection or object titles, the plugin passes user-controlled frontmatter values (page.header.flex.collection.title or page.header.flex.object.title) to Twig&#39;s template_from_string(), causing them to be evaluated as Twig code rather than treated as text. This path bypasses Grav&#39;s Security::cleanDangerousTwig() sanitization. An attacker who can control the title frontmatter of a publicly reachable Flex Objects page can achieve arbitrary Twig execution and escalate to remote command execution via access to internal Grav services such as the scheduler.</p> https://cve.radiocsirt.org/vuln/ghsa-mpq7-q5x9-rf83