Skip to content
OpenAdvisories

Package · npm

@tryghost/portal

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-43409

    Ghost's improper authentication allows access to member information and actions

    Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.…

    TryGhost Ghost ghost @tryghost/portal npm