Skip to content

CVE record · 1 source

CVE-2026-105652

CVSS 3.1

Ghost is a Node.js content management system.

Vendor: Node.js
Product: Node.js
CVSS: 3.1
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 26d ago

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and…

CVSS 3.1 Fix available CVE-2026-105652 Node.js