CVE-2026-56709: Grav Untrusted Host Invitation Linkcve-2026-56709-grav-untrusted-host-invitation-link
Invitation or activation link is constructed without validating trusted host headers via refuseIfUntrustedHost(), allowing host header poisoning.
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 4797
- Downloads
- 12M
- Verified
- 4797
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.