Skip to content
Release history
grav releases
Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig, and Symfony
Upgrade now
2.0.13
Mixed
·
RCE / SSRF
Auth
Breaking upgrade
Security fix + array_group_by + backup confinement
No immediate action
2.0.12
Mixed
·
Twig CSS read, language fallback, case‑insensitive match
Upgrade now
2.0.11
Mixed
·
RCE / SSRF
Auth
Security fixes + Twig improvements
No immediate action
2.0.10
Bug fix
·
Markdown override fix
Upgrade now
2.0.9
Security relevant
·
RCE / SSRF
Auth
Security fixes
No immediate action
2.0.8
Bug fix
·
Twig md5 fix + Markdown + image cache
Upgrade now
2.0.7
Mixed
·
RCE / SSRF
Breaking upgrade
Command‑execution fix + performance boosts
Upgrade now
2.0.6
Bug fix
·
Auth
Fixes folder avatar 403
Review required
2.0.5
Security relevant
·
Auth
Avatar display fix
Upgrade now
2.0.4
Mixed
·
Auth
Breaking upgrade
Case‑insensitive .htaccess + trusted iframes + onXssTrustedMarkup
Config change
2.0.3
Mixed
·
Auth
Session release setting + upgrade diagnostics
Upgrade now
2.0.2
Security relevant
·
RCE / SSRF
Auth
ZIP & Twig security fixes
Review required
2.0.1
Security relevant
·
RCE / SSRF
Auth
Decompression‑bomb + XSS fixes
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open