{"vulnerability": "CVE-2026-61456", "sightings": [{"uuid": "39064332-5c01-47d7-b867-99893003b65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqclhnwrcu2e", "content": "CVE-2026-61456 - Grav before 1.0.3 Stored XSS via SVG Upload API\nCVE ID : CVE-2026-61456\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /...", "creation_timestamp": "2026-07-10T16:37:29.561986Z"}, {"uuid": "ed766593-4b62-41ca-beff-d8a3b22b3266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61456", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxwefthh2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61456 \u0432 Grav API: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1E60F0D7-714B-476E-A10A-1B1BD33D32D9", "creation_timestamp": "2026-07-10T20:20:27.712178Z"}, {"uuid": "cb54e6aa-f7f3-4e2d-8607-1bf4df04cb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61456", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6kw7q3p27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61456 \u0432 Grav API: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/736281C8-35E2-43C4-81D7-AAD3DCC7AF53", "creation_timestamp": "2026-07-10T22:19:19.867774Z"}, {"uuid": "f5166320-d977-434f-8990-2b5e514e4233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61456", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcfb7efo2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61456 \u0432 Grav API Plugin: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BD508C28-6BBE-4127-B001-C54029161301", "creation_timestamp": "2026-07-10T23:27:45.172114Z"}]}