[MEDIUM] Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav

PKSA-fkd8-syrt-878t CVE-2026-58657 GHSA-ffmg-hfvg-jhg9

Affected package: getgrav/grav

Affected version: =2.0.0-rc.9

Reported by:
GitHub