Skip to content
OpenAdvisories

Package · npm

ghost

62 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.7
    CVE-2026-29053 Public exploit

    Ghost Vulnerable to Remote Code Execution via Malicious Themes

    Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.

    TryGhost Ghost ghost npm
  • Critical 9.4
    CVE-2026-26980 Public exploit EPSS 71%

    Ghost has a SQL Injection in its Content API

    Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1.

    TryGhost Ghost ghost npm
  • High 8.1
    CVE-2026-22594 Public exploit

    Ghost has Staff 2FA bypass

    Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0.

    TryGhost Ghost ghost npm
  • Medium 6.5
    CVE-2024-23724 Public exploit

    Ghost has possible Cross-site Scripting issue

    Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer rep…

    ghost npm
  • Medium 4.9
    CVE-2023-40028 Public exploit EPSS 66%

    Arbitrary file read via symlinks in Ghost

    Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host oper…

    TryGhost Ghost ghost npm
  • High 7.5
    CVE-2023-32235 Public exploit EPSS 39%

    Path Traversal in Ghost

    Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.

    ghost npm