Ghost security vulnerabilities
CMS / eCommerce / ERP. Public CVE monitoring for Ghost. Vendor security advisories are linked on this page.
Built for Operators of this product.
29 public records · 0 security-fix timeline events. 0 published in the last 7 days. 26 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 1
- High 10
- Medium 8
- Low 1
2026-08-0420 issues2026-11-01
Known exploited
View all known exploitedRecently published
Browse catalog- High8.8Memory Corruption via Crafted Image UploadsCheck if you run itEPSS 0.72%Oct 1, 2026
- High8.8Remote Code Execution via Bookmark Card ImagesCheck if you run itEPSS 0.27%Oct 1, 2026
- High7.3Stored XSS via Embed Card PreviewsCheck if you run itEPSS 0.28%Oct 1, 2026
- Medium6.8Stored XSS via SVG Files in Content ImportsCheck if you run itEPSS 0.32%Oct 1, 2026
- Medium4.9Regular Expression Denial of Service in External Media InlinerCheck if you run itEPSS 0.35%Oct 1, 2026
- Medium4.9Regular Expression Denial of Service in Content ImportCheck if you run itEPSS 0.35%Oct 1, 2026
- Medium4.0Server-Side Request Forgery in Bookmark FetchingCheck if you run itEPSS 0.24%Sep 24, 2026
- Medium4.0Private IP Filtering Bypass via IPv6 Transition AddressesCheck if you run itEPSS 0.30%Sep 24, 2026
- High7.3Stored XSS via SVG Uploads Bypassing SanitizationCheck if you run itEPSS 0.30%Sep 24, 2026
- High8.1Stored XSS via oEmbed Photo ResponsesCheck if you run itEPSS 0.33%Sep 17, 2026