https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T23:35:27.502477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-ghost-2022-27139 BIT-ghost-2022-27139 2026-10-21T23:35:27.505679+00:00

Affected: Bitnami: ghost

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploading of SVG files to Ghost does not represent a remote code execution vulnerability. SVGs are not executable on the server, and may only execute javascript in a client's browser - this is expected and intentional functionality

 https://cve.radiocsirt.org/vuln/euvd-2026-15137 EUVD-2026-15137 2026-10-21T23:35:27.505733+00:00 EUVD-2026-15137 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27139 fkie_cve-2022-27139 2026-10-21T23:35:27.505749+00:00

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploading of SVG files to Ghost does not represent a remote code execution vulnerability. SVGs are not executable on the server, and may only execute javascript in a client's browser - this is expected and intentional functionality

 https://cve.radiocsirt.org/vuln/ghsa-fvc6-qjp7-m4g4 GHSA-fvc6-qjp7-m4g4 — Arbitrary file upload in Ghost 2026-10-21T23:35:27.505775+00:00

Affected: npm: ghost

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file.

 https://cve.radiocsirt.org/vuln/gsd-2022-27139 gsd-2022-27139 2026-10-21T23:35:27.505795+00:00 gsd-2022-27139