ghost
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 87 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 17, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
Ghost versions 5.9.0 to 6.44.0 have an an unanchored regex and a string-built query filter let any member delete every comment vote on a site (CVE-2026-103288)
Ghost: Server-Side Request Forgery in Webhook Trigger
Ghost: Path Traversal via Locale Setting
Ghost: Invite Token Disclosure in Ghost Admin API
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
Ghost: Stored XSS via Bookmark Card Images
Ghost: Stored XSS via Embed Card Previews
Ghost: Remote Code Execution via Bookmark Card Images
Monitor ghost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.