Ghost vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
29 matching records
- High8.8Memory Corruption via Crafted Image UploadsCheck if you run itEPSS 0.72%Oct 1, 2026
- High8.8Remote Code Execution via Bookmark Card ImagesCheck if you run itEPSS 0.27%Oct 1, 2026
- High7.3Stored XSS via Embed Card PreviewsCheck if you run itEPSS 0.28%Oct 1, 2026
- Medium6.8Stored XSS via SVG Files in Content ImportsCheck if you run itEPSS 0.32%Oct 1, 2026
- Medium4.9Regular Expression Denial of Service in External Media InlinerCheck if you run itEPSS 0.35%Oct 1, 2026
- Medium4.9Regular Expression Denial of Service in Content ImportCheck if you run itEPSS 0.35%Oct 1, 2026
- Medium4.0Server-Side Request Forgery in Bookmark FetchingCheck if you run itEPSS 0.24%Sep 24, 2026
- Medium4.0Private IP Filtering Bypass via IPv6 Transition AddressesCheck if you run itEPSS 0.30%Sep 24, 2026
- High7.3Stored XSS via SVG Uploads Bypassing SanitizationCheck if you run itEPSS 0.30%Sep 24, 2026
- High8.1Stored XSS via oEmbed Photo ResponsesCheck if you run itEPSS 0.33%Sep 17, 2026
- High7.3Stored XSS via Bookmark Card ImagesCheck if you run itEPSS 0.30%Sep 17, 2026
- Low3.1Password Hash Ordering Disclosure in Ghost Admin APICheck if you run itEPSS 0.26%Sep 17, 2026
- High7.5Invite Token Disclosure in Ghost Admin APICheck if you run itEPSS 0.40%Sep 17, 2026
- Medium4.9Path Traversal via Locale SettingCheck if you run itEPSS 0.40%Sep 17, 2026
- High7.2Remote Code Execution via Theme Translation FilesCheck if you run itEPSS 0.52%Sep 17, 2026
- Medium4.3Editors Could Promote Staff Users to Their Own RoleCheck if you run itEPSS 0.20%Sep 17, 2026
- High7.3Stored XSS via File Uploads on Local StorageCheck if you run itEPSS 0.24%Sep 17, 2026
- Critical9.8Suspended Staff Could Reactivate Accounts with Password ResetOpen the advisorySep 3, 2026
- Medium4.3Staff Could Accept Invite with any EmailOpen the advisorySep 3, 2026
- High7.1Unauthenticated Stripe Checkout Allowed Member Account Modification and HTML Injection in NewslettersOpen the advisorySep 3, 2026
- High8.8Ghost is a Node.js content management system.Check if you run itEPSS 0.17%Mar 7, 2026
- Critical9.8Ghost is a Node.js content management system.Check if you run itEPSS 4.90%Mar 5, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 71.09%Feb 20, 2026
- Medium5.1Ghost is a Node.js content management system.Check if you run itEPSS 0.30%Jan 10, 2026
- Medium6.7Ghost is a Node.js content management system.Check if you run itEPSS 0.47%Jan 10, 2026