ghost vulnerabilities — 103 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Low CVE-2026-103290: Ghost Path Traversal Vulnerability in ImageSize Service ghost Bitnami 13 Oct 2026 6.27.0
Low CVE-2026-103287: Ghost Package Server-Side Request Forgery Vulnerability ghost Bitnami 13 Oct 2026 6.27.0
Medium CVE-2026-103289: Ghost Package Authorization Bypass in Comments Feature ghost Bitnami 13 Oct 2026 6.44.1
Medium CVE-2026-105680: Ghost Package Authorization Flaw Allows Author Role to Delete Any Post ghost Bitnami 13 Oct 2026 6.60.0
High CVE-2026-104411: Ghost CMS Stored XSS via File Uploads on Local Storage ghost Bitnami 13 Oct 2026 6.64.0
Medium CVE-2026-104412: Ghost Package Vulnerability Allows Editors to Elevate User Roles ghost Bitnami 13 Oct 2026 6.64.0
High CVE-2026-104418: Ghost Remote Code Execution via Theme Translation Files ghost Bitnami 13 Oct 2026 6.64.0
Medium CVE-2026-104417: Ghost Path Traversal Vulnerability in Node.js Content Management System ghost Bitnami 13 Oct 2026 6.64.0
High CVE-2026-104416: Ghost Package - Invite Token Disclosure in Admin API ghost Bitnami 13 Oct 2026 6.64.0
Low CVE-2026-104415: Ghost Password Hash Ordering Disclosure in Ghost Admin API ghost Bitnami 13 Oct 2026 6.64.0
High CVE-2026-104413: Ghost CMS Stored XSS via Bookmark Card Images ghost Bitnami 13 Oct 2026 6.64.0
High CVE-2026-104414: Ghost Stored XSS Vulnerability via oEmbed Photo Responses ghost Bitnami 13 Oct 2026 6.64.0
High CVE-2026-105649: Ghost CMS Stored XSS via SVG Uploads Bypassing Sanitization ghost Bitnami 13 Oct 2026 6.65.0
Medium CVE-2026-105648: Ghost Package Vulnerability - Private IP Filtering Bypass via IPv6 Transition Addresses ghost Bitnami 13 Oct 2026 6.65.0
Medium CVE-2026-105647: Ghost Package Server-Side Request Forgery Vulnerability ghost Bitnami 13 Oct 2026 6.65.0
Medium CVE-2026-105646: Ghost Package Suffers from Regular Expression Denial of Service in Content Import ghost Bitnami 13 Oct 2026 6.67.0
Medium CVE-2026-105645: Ghost Package Suffers from Regular Expression Denial of Service in External Media Inliner ghost Bitnami 13 Oct 2026 6.67.0
Medium CVE-2026-105644: Ghost CMS Stored XSS Vulnerability via SVG Files in Content Imports ghost Bitnami 13 Oct 2026 6.67.0
High CVE-2026-105643: Ghost Stored XSS Vulnerability in Embed Card Previews ghost Bitnami 13 Oct 2026 6.67.0
High CVE-2026-105642: Ghost Package Remote Code Execution via Bookmark Card Images ghost Bitnami 13 Oct 2026 6.67.0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.