Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

ghost

npm

The professional publishing platform

View on github.com · View on npmjs.org

Security Advisories for ghost in npm

Moderate
11 days ago

Ghost Content API filter bypass reveals private fields GSA_kwCzR0hTQS1qeDM1LXg3Zmotdmdwcs4ABhYI

npm ghost
Moderate
11 days ago

Ghost: Cross-Site Scripting in Feature Image Captions GSA_kwCzR0hTQS1wcjIyLXA5cnAtMmNxds4ABhYH

npm ghost
Moderate
11 days ago

Ghost: Server-Side Request Forgery Mitigation Issue GSA_kwCzR0hTQS14NW1tLXdtNGctajV4ds4ABhYG

npm ghost
Moderate
12 days ago

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature GSA_kwCzR0hTQS14bTQzLTNtNTYtdzN3Zs4ABhT0

npm ghost
Moderate
12 days ago

Ghost: Member existence leak via magic link sign-in response GSA_kwCzR0hTQS1jaGdtLTM2OTgtam00Ms4ABhTx

npm ghost
Moderate
12 days ago

Ghost: Session Fixation in Ghost Admin GSA_kwCzR0hTQS03bXBwLXIzN2oteDV3aM4ABhTn

npm ghost
Moderate
12 days ago

Ghost: Theme Upload Path Traversal GSA_kwCzR0hTQS1jamM5LXE1Z2YtMzI3cM4ABhTm

npm ghost
Moderate
12 days ago

Ghost: Database Backup Path Traversal GSA_kwCzR0hTQS1jajYyLWh2djItMnE1aM4ABhTl

npm ghost
Moderate
12 days ago

Ghost: Server-Side Request Forgery in Image Fetching GSA_kwCzR0hTQS1nY3Z2LTcycTgtOXY3Ns4ABhTk

npm ghost
Moderate
12 days ago

Ghost: Blind Password Hash Disclosure in Ghost Admin API GSA_kwCzR0hTQS1qbTIyLTN3MjMtNXE3d84ABhTI

npm ghost
Moderate
12 days ago

Ghost: Mobiledoc image-size fetch SSRF GSA_kwCzR0hTQS1nMzY2LTIzZnctZ2dwNs4ABhTG

npm ghost
Moderate
12 days ago

Ghost: Server-side request forgery via DNS rebinding in external request handling GSA_kwCzR0hTQS1jaDUyLXB4OHEtZjIyas4ABhTF

npm ghost
Moderate
12 days ago

Ghost: Private IP filtering bypass to make server-side requests to internal services GSA_kwCzR0hTQS13dnAyLTRxcXAtNGgzcs4ABhS9

npm ghost
Moderate
12 days ago

Ghost: Archived Offers can be Redeemed GSA_kwCzR0hTQS00d3gyLTdndmotcWZxM84ABhS8

npm ghost
Moderate
12 days ago

Ghost: File Upload Content-Type Spoofing GSA_kwCzR0hTQS05NDR4LXBtOTUtM2pwcs4ABhS7

npm ghost
Moderate
12 days ago

Ghost: Cross-Site Scripting in Universal Import GSA_kwCzR0hTQS0yZ3g2LTdneDItd3djZs4ABhS6

npm ghost
Critical
about 2 months ago

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header GSA_kwCzR0hTQS02MnE2LTRodjQtdmpyd84ABaAB

npm ghost
High
5 months ago

Ghost has incomplete CSRF protections around OTC use GSA_kwCzR0hTQS05bTg0LXdjMjgtdzg5Nc4ABTJg

npm ghost
High
6 months ago

Ghost Vulnerable to Remote Code Execution via Malicious Themes GSA_kwCzR0hTQS1jZ2MyLXJjcmgtcXI1eM4ABTDg

npm ghost
Critical
6 months ago

Ghost has a SQL injection in Content API GSA_kwCzR0hTQS13NTJ2LXY3ODMtZ3c5N84ABSgV

npm ghost
High
7 months ago

Ghost vulnerable to XSS via malicious Portal preview links GSA_kwCzR0hTQS1ndjZxLTJtOTctODgyaM4ABRrD

npm @tryghost/portal, ghost
Moderate
7 months ago

Ghost has SQL Injection in Members Activity Feed GSA_kwCzR0hTQS1nanJwLXhnbWgteDlxcc4ABQ3z

npm ghost
Moderate
7 months ago

Ghost has SSRF via External Media Inliner GSA_kwCzR0hTQS12bWM0LTk4MjgtcjQ4cs4ABQ3y

npm ghost
High
7 months ago

Ghost has Staff Token permission bypass GSA_kwCzR0hTQS05eGc3LW13bXAteG1qeM4ABQ3x

npm ghost
High
7 months ago

Ghost has Staff 2FA bypass GSA_kwCzR0hTQS01ZnA3LWc2NDYtY2NmNM4ABQ3i

npm ghost
Moderate
11 months ago

Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark GSA_kwCzR0hTQS1mN3FnLXhqNDUtdzk1Ns4ABMIm

npm ghost
Moderate
almost 2 years ago

Ghost's improper authentication allows access to member information and actions GSA_kwCzR0hTQS03OHgyLWN3cDktNWo0Ms4AA-0D

npm @tryghost/portal, ghost
Moderate
over 2 years ago

Ghost has possible Cross-site Scripting issue GSA_kwCzR0hTQS05OXZjLXh3OGotcGhqbc4AA5M7

npm ghost
Moderate
over 2 years ago

Cross-site Scripting in Ghost GSA_kwCzR0hTQS1maDM4LTlmZ3ItNDU0d84AA4mG

npm ghost
Moderate
about 3 years ago

Ghost vulnerable to arbitrary file read via symlinks in content import GSA_kwCzR0hTQS05Yzl2LXcyMjUtdjVyZ84AA1Uk

npm ghost
High
over 3 years ago

Path Traversal in Ghost GSA_kwCzR0hTQS13Zjd4LWZoNnctMzRyNs4AAzGS

npm ghost
High
over 3 years ago

Ghost vulnerable to information disclosure of private API fields GSA_kwCzR0hTQS1yOTdxLWdoY2gtODJqOc4AAzEw

npm ghost
High
over 3 years ago

ghost vulnerable to unauthorized newsletter modification via improper access controls GSA_kwCzR0hTQS05Z2g4LXdwNTMtY2NjNs4AAwEB

npm ghost
Moderate
about 4 years ago

Ghost vulnerable to remote code execution in locale setting change GSA_kwCzR0hTQS03djI4LWcycHEtZ2dnOM4AArtH

npm ghost
Critical
over 4 years ago

Arbitrary file upload in Ghost GSA_kwCzR0hTQS1mdmM2LXFqcDctbTRnNM06yw

npm ghost
Critical
over 4 years ago

Arbitrary file upload in Ghost GSA_kwCzR0hTQS1mZmhxLWc4NTYtOWYycM06-g

npm ghost
Moderate
almost 5 years ago

Member account takeover GSA_kwCzR0hTQS02NXA3LXBqajgtZ2dtcs0V-w

npm ghost
Moderate
almost 5 years ago

Remote command injection when using sendmail email transport GSA_kwCzR0hTQS13ZnJqLXFxYzItODNjbc0V0g

npm ghost
Moderate
about 5 years ago

Privilege escalation: all users can access Admin-level API keys MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo1YzItaG00Ni13cDVj

npm ghost
Moderate
over 5 years ago

Server-side request forgery in Ghost CMS MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE0aDgtN3FmZi1naDZj

npm ghost
Moderate
over 5 years ago

DOM XSS in Theme Preview MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmZ3gtcTI1aC1qeHJn

npm ghost

Filter by Severity

Moderate 29 High 8 Critical 4