Threats Tagged 'ghsa-4x9g-vw65-vvf9'

CVE-2026-53653 is a high-severity vulnerability in the Grav CMS that allows unauthenticated attackers to cause a denial of service by requesting image resizes with excessively large dimensions. The flaw arises because the system does not limit the size of image resize parameters, leading to excessive memory and CPU consumption. This can crash the server by exhausting resources. A patch is available that introduces configurable limits on image resize dimensions to prevent abuse.