ghost vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-103288Mediumghost: Ghost: Authorization Bypass in Comment Like Feature CVE-2026-105642Highghost: Ghost: Remote Code Execution via Bookmark Card Images CVE-2026-105643Highghost: Ghost: Stored XSS via Embed Card Previews CVE-2026-105644Mediumghost: Ghost : Stored XSS via SVG Files in Content Imports CVE-2026-105645Mediumghost: Ghost: Regular Expression Denial of Service in External Media Inliner CVE-2026-105646Mediumghost: Ghost: Regular Expression Denial of Service in Content Import CVE-2026-105647Mediumghost: Ghost: Server-Side Request Forgery in Bookmark Fetching CVE-2026-105648Mediumghost: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses CVE-2026-105649Highghost: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization CVE-2026-105650Highghost: Ghost: Stored XSS via oEmbed Photo Responses CVE-2026-105651Highghost: Ghost: Stored XSS via Bookmark Card Images CVE-2026-105652Lowghost: Ghost: Password Hash Ordering Disclosure in Ghost Admin API CVE-2026-105675Highghost: Ghost: Invite Token Disclosure in Ghost Admin API CVE-2026-105676Mediumghost: Ghost: Path Traversal via Locale Setting CVE-2026-105677Highghost: Ghost: Remote Code Execution via Theme Translation Files CVE-2026-105678Mediumghost: Ghost: Editors Could Promote Staff Users to Their Own Role CVE-2026-105679Highghost: Ghost: Stored XSS via File Uploads on Local Storage CVE-2026-105680Mediumghost: Ghost: Authorization Issue Allowed Author Role to Delete any Post CVE-2026-105681Mediumghost: Ghost: Authorization Bypass in Comments Feature CVE-2026-105682Lowghost: Ghost: Server-Side Request Forgery in Webhook Trigger CVE-2026-105683Lowghost: Ghost: Path Traversal Vulnerability in Ghost ImageSize Service CVE-2026-53949Mediumghost: Ghost Content API filter bypass reveals private fields CVE-2026-70596Mediumghost: Ghost: Cross-Site Scripting in Feature Image Captions CVE-2026-70595Mediumghost: Ghost: Server-Side Request Forgery Mitigation Issue CVE-2026-59817Mediumghost: Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.