https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T12:36:23.616316+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109326 CVE-2026-109326 — Grav before 2.1.7 Information Disclosure via Nested .git Directories 2026-10-19T12:36:23.617478+00:00

Affected: getgrav grav

Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root. Unauthenticated attackers can request nested repositories such as user/.git to retrieve Git config, refs, and objects, reconstructing unpublished history or committed secrets.