CVE-2026-92917 | Getgrav Grav up to 2.0.21 Twig Content Sandbox assertSandboxDumpSafe Source sandbox

A vulnerability categorized as problematic has been discovered in Getgrav Grav up to 2.0.21. Affected is the function GravExtension::assertSandboxDumpSafe of the component Twig Content Sandbox. Executing a manipulation of the argument Source can lead to sandbox issue.

This vulnerability is tracked as CVE-2026-92917. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More