gemstone-source
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2026-62237No exploit | Grav < 2.0.4 ReDoS via regex_replace in Sandboxgetgrav · grav · CWE-1333 | Medium6.0 | — | 0.3% | Jul 17, 2026 |
33Monitor | CVE-2026-62234No exploit | Grav < 2.0.4 SSRF via Unrestricted cURL Protocolsgetgrav · grav · CWE-918 | High8.4 | — | 0.4% | Jul 16, 2026 |
20Monitor | CVE-2026-61453No exploit | Grav before 2.0.1 XSS via Twig String Concatenationgetgrav · grav · CWE-79 | Medium5.1 | — | 0.2% | Jul 15, 2026 |
37Monitor | CVE-2026-61451No exploit | Grav before 1.0.4 Password Reset Token Poisoning via admin_base_urlgetgrav · grav · CWE-601 | Critical9.4 | — | 0.4% | Jul 15, 2026 |
- CVE-2026-6223724Monitor
Grav < 2.0.4 ReDoS via regex_replace in Sandbox
MediumCVSS 6.0No exploitEPSS 0%getgrav · gravJul 17, 2026
- CVE-2026-6223433Monitor
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols
HighCVSS 8.4No exploitEPSS 0%getgrav · gravJul 16, 2026
- CVE-2026-6145320Monitor
Grav before 2.0.1 XSS via Twig String Concatenation
MediumCVSS 5.1No exploitEPSS 0%getgrav · gravJul 15, 2026
- CVE-2026-6145137Monitor
Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url
CriticalCVSS 9.4No exploitEPSS 0%getgrav · gravJul 15, 2026