GH
Product
ghostfolio
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 2Low 0
Watch
Add ghostfolio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28785 | 9.8 | Mar 6 | Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import Affected: < 2.244.0 |
| CVE-2026-28680 | 9.3 | Mar 6 | Ghostfolio: Full-Read SSRF in Manual Asset Import Affected: < 2.245.0 |
| CVE-2026-59708 | 7.5 | Jul 7 | Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint Affected: through 3.6.0 |
| CVE-2026-47127 | 6.5 | Aug 7 | Ghostfolio has a Stripe subscription bypass Affected: < 3.4.0 |
| CVE-2026-59709 | 4.3 | Jul 7 | Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check Affected: through 3.6.0 |
Showing 5