Known Vulnerabilities for products from Ghost
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Ghost".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59817 json | Not Provided | 2026-07-09 | 2026-07-14 | |
| CVE-2026-57651 json | Not Provided | 2026-06-26 | 2026-06-26 | |
| CVE-2026-53950 json | Not Provided | 2026-06-24 | 2026-06-24 | |
| CVE-2026-53949 json | Not Provided | 2026-06-24 | 2026-06-24 | |
| CVE-2026-53948 json | Not Provided | 2026-06-24 | 2026-06-25 | |
| CVE-2026-53947 json | Not Provided | 2026-06-24 | 2026-06-25 | |
| CVE-2026-53946 json | Not Provided | 2026-06-24 | 2026-06-25 | |
| CVE-2026-53945 json | Not Provided | 2026-06-24 | 2026-06-25 | |
| CVE-2026-53944 json | Not Provided | 2026-06-24 | 2026-06-24 | |
| CVE-2026-53943 json | Not Provided | 2026-06-24 | 2026-06-24 | |
| CVE-2026-26980 json | Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbit... | Not Provided | 2026-02-20 | 2026-05-26 |
| CVE-2026-22597 json | Ghost is a Node.js content management system. In versions 5.38.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in... | Not Provided | 2026-01-10 | 2026-04-29 |
| CVE-2024-23725 json | 6.1 - MEDIUM | 2024-01-21 | 2024-01-29 | |
| CVE-2023-40028 json | Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authe... | 6.5 - MEDIUM | 2023-08-15 | 2023-08-23 |
| CVE-2023-32235 json | Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2... | 7.5 - HIGH | 2023-05-05 | 2023-05-11 |
| CVE-2023-31133 json | Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subsc... | 7.5 - HIGH | 2023-05-08 | 2023-05-15 |
| CVE-2023-26510 json | Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent wi... | 5.7 - MEDIUM | 2023-03-05 | 2023-03-09 |
| CVE-2022-47197 json | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installa... | 5.4 - MEDIUM | 2023-01-19 | 2023-01-27 |
| CVE-2022-47196 json | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installa... | 5.4 - MEDIUM | 2023-01-19 | 2023-06-23 |
| CVE-2022-47195 json | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installa... | 5.4 - MEDIUM | 2023-01-19 | 2023-01-27 |
Known software with vulnerabilities from Ghost
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ghost | Ghost | - |