Skip to content

CVE record · 1 source

CVE-2026-105682

CVSS 2.7

Ghost is a Node.js content management system.

Vendor: Node.js
Product: Node.js
CVSS: 2.7
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 26d ago

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server. This issue is fixed in version 6.27.0.

CVSS 2.7 Fix available CVE-2026-105682 Node.js