Skip to content

Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

High severity GitHub Reviewed Published Dec 1, 2025 in getgrav/grav • Updated Dec 2, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts