Ghost Foundation

9 CVEs across 2 Ghost Foundation products. Browse Ghost Foundation vulnerabilities, severities, and proof-of-concept exploits.

Ghost Foundation products with known CVEs

ProductCVEs
Ghost8
Node-Sqlite31
Ghost Foundation CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72596High8.12026-08-11A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model…
CVE-2024-34559High7.52024-05-14Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from n/a through 1.4.0.
CVE-2022-43441High8.12023-03-16A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can l…
CVE-2022-47197Medium5.42023-01-19An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administr…
CVE-2022-47196Medium5.42023-01-19An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administr…
CVE-2022-47195Medium5.42023-01-19An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administr…
CVE-2022-47194Medium5.42023-01-19An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administr…
CVE-2022-41697Medium5.32022-12-22A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure o…
CVE-2022-41654Medium4.32022-12-22An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request ca…