Tryghost - vulnerabilities (CVEs)

52 CVEs in 3 products, 20 in the last 30 days, newest from 2026-10-05.

Products

• Ghost - 51 CVEs
• Express-hbs - 1 CVEs
• Ghost-cli - 0 CVEs

Newest CVEs of Tryghost

• CVE-2026-105683 - CVSS 3.8 (low), 2026-10-05: Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside…
• CVE-2026-105682 - CVSS 2.7 (low), 2026-10-05: Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal…
• CVE-2026-105681 - CVSS 6.5 (medium), 2026-10-05: Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized…
• CVE-2026-105680 - CVSS 6.5 (medium), 2026-10-05: Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This…
• CVE-2026-105679 - CVSS 7.3 (high), 2026-10-05: Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers…
• CVE-2026-105678 - CVSS 4.3 (medium), 2026-10-05: Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to…
• CVE-2026-105677 - CVSS 7.2 (high), 2026-10-05: Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated…
• CVE-2026-105676 - CVSS 4.9 (medium), 2026-10-05: Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated…
• CVE-2026-105675 - CVSS 7.5 (high), 2026-10-05: Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret…
• CVE-2026-105652 - CVSS 3.1 (low), 2026-10-05: Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users'…
• CVE-2026-105651 - CVSS 7.3 (high), 2026-10-05: Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an…
• CVE-2026-105650 - CVSS 8.1 (high), 2026-10-05: Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts…
• CVE-2026-105649 - CVSS 7.3 (high), 2026-10-05: Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored…
• CVE-2026-105648 - CVSS 4 (medium), 2026-10-05: Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an…
• CVE-2026-105647 - CVSS 4 (medium), 2026-10-05: Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an…
• CVE-2026-105646 - CVSS 4.9 (medium), 2026-10-05: Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server…
• CVE-2026-105645 - CVSS 4.9 (medium), 2026-10-05: Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage,…
• CVE-2026-105644 - CVSS 6.8 (medium), 2026-10-05: Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker…
• CVE-2026-105643 - CVSS 7.3 (high), 2026-10-05: Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored…
• CVE-2026-105642 - CVSS 8.8 (high), 2026-10-05: Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG…
• CVE-2026-70596 - CVSS 4.3 (medium), 2026-08-05: Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in…
• CVE-2026-70595 - CVSS 4 (medium), 2026-08-05: Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an…
• CVE-2026-70594 - CVSS 6.7 (medium), 2026-08-04: Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for…
• CVE-2026-70593 - CVSS 6.6 (medium), 2026-08-04: Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the…
• CVE-2026-70592 - CVSS 5.5 (medium), 2026-08-04: Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem…
• CVE-2026-70591 - CVSS 4.1 (medium), 2026-08-04: Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level…
• CVE-2026-70590 - CVSS 4.8 (medium), 2026-08-04: Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the…
• CVE-2026-70589 - CVSS 4.8 (medium), 2026-08-04: Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no…
• CVE-2026-70588 - CVSS 5 (medium), 2026-08-04: Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported…
• CVE-2026-59817 - CVSS 5.3 (medium), 2026-07-09: Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control…