Login Request a demo
GH
Product
Ghost
by TryGhost · last CVE Oct 5, 2026
83
CVEs
0
On KEV
9.8
Max CVSS
54
New 30D
Vulnerabilities83In the news4Timeline
Severity mix
Critical 2High 29Medium 45Low 7
Severity
All severities83Critical2High29Medium45Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ghost to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105683
3.8
0%
Oct 5
Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Affected: >= 6.14.0, < 6.27.0
CVE-2026-103290
3.8
0%
Oct 1
Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize
Affected: 6.14.0 before 6.27.0
CVE-2026-105652
3.1
0%
Oct 5
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
Affected: >= 0.7.2, < 6.64.0
CVE-2026-104415
3.1
0%
Oct 2
Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API
Affected: 0.7.2 before 6.64.0
CVE-2026-105682
2.7
0%
Oct 5
Ghost: Server-Side Request Forgery in Webhook Trigger
Affected: >= 1.18.0, < 6.27.0
CVE-2026-103287
2.7
0%
Oct 1
Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook
Affected: 1.18.0 before 6.27.0
CVE-2026-22597
2.7
0%
Jan 10
Ghost has SSRF via External Media Inliner
Affected: >= 6.0.0, < 6.11.0; >= 5.38.0, < 5.130.6
Showing 7