Skip to content

CVE record · 1 source

CVE-2026-105681

CVSS 6.5

Ghost is a Node.js content management system.

Vendor: Node.js
Product: Node.js
CVSS: 6.5
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

13

CVE NVD 26d ago

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1.

CVSS 6.5 Fix available CVE-2026-105681 Node.js