Ghostmanager - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-24.

Products

• Ghostwriter - 2 CVEs

Newest CVEs of Ghostmanager

• CVE-2026-78204 - CVSS 5.4 (medium), 2026-08-24: Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only…
• CVE-2026-78203 - CVSS 7.1 (high), 2026-08-24: Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from…