Ghost vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
29 matching records
- High8.1Ghost is a Node.js content management system.Check if you run itEPSS 0.54%Jan 10, 2026
- High8.1Ghost is a Node.js content management system.Check if you run itEPSS 1.31%Jan 10, 2026
- Medium6.1Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue affects Ghost: from 6.0.0 through 6.0.8, from 5.99.0 through 5.Check if you run itEPSS 0.52%Sep 17, 2025
- Unknownghost ghost Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 39.08%Dec 4, 2023