Login Request a demo
GH
Product
Ghost
by TryGhost · last CVE Oct 5, 2026
72
CVEs
0
On KEV
9.6
Max CVSS
54
New 30D
Vulnerabilities72In the news0Timeline
Severity mix
Critical 1High 23Medium 42Low 6
Severity
All severities72Critical1High23Medium42Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ghost to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105683
3.8
0%
Oct 5
Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Affected: >= 6.14.0, < 6.27.0
CVE-2026-103290
3.8
0%
Oct 1
Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize
Affected: 6.14.0 before 6.27.0
CVE-2026-105652
3.1
0%
Oct 5
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
Affected: >= 0.7.2, < 6.64.0
CVE-2026-104415
3.1
0%
Oct 2
Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API
Affected: 0.7.2 before 6.64.0
CVE-2026-105682
2.7
0%
Oct 5
Ghost: Server-Side Request Forgery in Webhook Trigger
Affected: >= 1.18.0, < 6.27.0
CVE-2026-103287
2.7
0%
Oct 1
Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook
Affected: 1.18.0 before 6.27.0
Showing 6