https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:30:14.314346+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-43409 CVE-2024-43409 — Ghost's improper authentication allows access to member information and actions 2026-10-03T05:30:14.315506+00:00

Affected: TryGhost Ghost, ghost

Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.4. v5.89.5 contains a fix for this issue.