Skip to content

CVE record · 1 source

CVE-2026-105675

CVSS 7.5

Ghost is a Node.js content management system.

Vendor: Node.js
Product: Node.js
CVSS: 7.5
EPSS: 0.004 (p33)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 26d ago

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher…

CVSS 7.5 Fix available CVE-2026-105675 Node.js