CVE record · 1 source
CVE-2026-105679
CVSS 7.3Ghost is a Node.js content management system.
- Vendor
- Node.js
- Product
- Node.js
- CVSS
- 7.3
- EPSS
- 0.002 (p15)
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Ghost is a Node.js content management system.
Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter…