CVSS 4.0
5.1 mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:NCVE-2026-22597
Medium (5.1) in ghost ghost. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in ghost 5.130.6, 6.11.0.
Ghost is a Node.js content management system. In versions 5.38.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost’s media inliner mechanism allows staff users in possession of a valid authentication token for the Ghost Admin API to exfiltrate data from internal systems via SSRF. This issue has been patched in versions 5.130.6 and 6.11.0.
Severity
CVSS 3.1
2.7 lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ghost:ghost
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vmc4-9828-r48r | npm | ghost | >=6.0.0 <6.11.0 | 6.11.0 |
| GHSA-vmc4-9828-r48r | npm | ghost | >=5.105.0 <5.130.6 | 5.130.6 |