CVE-2026-112779 - Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass
CVE ID :CVE-2026-112779 Published : Oct. 19, 2026, 7:10 p.m. | 54 minutes ago Description :Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and...