GH
Vendor
ghostfolio
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47127 | GH ghostfolio ghostfolio | 6.5 | Aug 7 | Ghostfolio has a Stripe subscription bypass |
| CVE-2026-59708 | GH ghostfolio ghostfolio | 7.5 | Jul 7 | Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint |
| CVE-2026-59709 | GH Ghostfolio Ghostfolio | 4.3 | Jul 7 | Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check |
| CVE-2026-28785 | GH ghostfolio ghostfolio | 9.8 | Mar 6 | Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import |
| CVE-2026-28680 | GH ghostfolio ghostfolio | 9.3 | Mar 6 | Ghostfolio: Full-Read SSRF in Manual Asset Import |