[LOW] Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

PKSA-xzd7-91fp-yh97 CVE-2026-72701 GHSA-38p6-h87p-r4cg

Affected package: getgrav/grav

Affected version: <=2.0.15

Reported by:
GitHub