Vulnerabilities

Ghost is a Node.js content management system.

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is fixed in version 6.64.0.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Node.js

Product

Node.js

CVSS

4.9

Fix

available

Exposure class

Developer platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-105676 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 3.8 Fix available CVE-2026-105683 Node.js
2. 10
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 2.7 Fix available CVE-2026-105682 Node.js
3. 13
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 6.5 Fix available CVE-2026-105681 Node.js
4. 13
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 6.5 Fix available CVE-2026-105680 Node.js
5. 20
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 7.3 Fix available CVE-2026-105679 Node.js
6. 13
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 4.3 Fix available CVE-2026-105678 Node.js
7. 20
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 7.2 Fix available CVE-2026-105677 Node.js
8. 20
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 7.5 Fix available CVE-2026-105675 Node.js
9. 10
   CVE NVD 26d ago

   Ghost is a Node.js content management system.

   CVSS 3.1 Fix available CVE-2026-105652 Node.js
10. 20
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 7.3 Fix available CVE-2026-105651 Node.js
11. 20
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 8.1 Fix available CVE-2026-105650 Node.js
12. 20
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 7.3 Fix available CVE-2026-105649 Node.js
13. 13
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 4.0 Fix available CVE-2026-105648 Node.js
14. 13
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 4.0 Fix available CVE-2026-105647 Node.js
15. 13
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 4.9 Fix available CVE-2026-105646 Node.js
16. 13
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 4.9 Fix available CVE-2026-105645 Node.js
17. 13
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 6.8 Fix available CVE-2026-105644 Node.js
18. 20
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 7.3 Fix available CVE-2026-105643 Node.js
19. 20
    CVE NVD 26d ago

    Ghost is a Node.js content management system.

    CVSS 8.8 Fix available CVE-2026-105642 Node.js