Skip to content
OpenAdvisories

Product · Trilby Media

grav-plugin-git-sync

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-109318

    Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

    Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attacker…

    Trilby Media grav-plugin-git-sync