https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:12:11.174147+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380053 EUVD-2026-380053 2026-10-06T07:12:11.219295+00:00 EUVD-2026-380053 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103281 fkie_cve-2026-103281 2026-10-06T07:12:11.219331+00:00

Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.

 https://cve.radiocsirt.org/vuln/ghsa-crq6-86x9-65hj GHSA-crq6-86x9-65hj 2026-10-06T07:12:11.219365+00:00

Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.