CVE-2026-53654: Grav Unvalidated Client Redirectcve-2026-53654-grav-unvalidated-client-redirect
Client-controlled redirect target from `_redirect` is used in `setRedirect()` without validating that the target is internal using `!Uri::isExternal()`.
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 4797
- Downloads
- 12M
- Verified
- 4797
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.