[LOW] Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match

PKSA-ms14-tz6x-6sqm CVE-2026-72702 GHSA-9ccq-2jfg-qw33

Affected package: getgrav/grav

Affected version: <=2.0.15

Reported by:
GitHub