Skip to content

CVE record · 1 source

CVE-2026-105678

CVSS 4.3

Ghost is a Node.js content management system.

Vendor: Node.js
Product: Node.js
CVSS: 4.3
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

13

CVE NVD 26d ago

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign…

CVSS 4.3 Fix available CVE-2026-105678 Node.js