https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:54:12 +0000 https://cve.radiocsirt.org/vuln/bit-ghost-2026-29053 <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.</p> <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.</p> https://cve.radiocsirt.org/vuln/bit-ghost-2026-29053 https://cve.radiocsirt.org/vuln/euvd-2026-274607 EUVD-2026-274607 https://cve.radiocsirt.org/vuln/euvd-2026-274607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29053 <p>Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.</p> <p>Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-29053 https://cve.radiocsirt.org/vuln/ghsa-cgc2-rcrh-qr5x <p><strong>Affected:</strong> npm: ghost</p> <p>### Impact</p> <p>Specifically crafted malicious themes can execute arbitrary code on the server running Ghost.</p> <p>### Vulnerable Versions</p> <p>This vulnerability is present in Ghost v0.7.2 to v6.19.0.</p> <p>### Patches</p> <p>v6.19.1 contains a fix for this issue.</p> <p>### Workarounds</p> <p>Ghost generally recommends users refrain from installing untrusted themes. If a malicious theme has already been installed, it is recommended to uninstall the theme and then inspect it to understand its impact, which will be attack-specific.</p> <p>### References Ghost thanks Cristian-Alexandru Staicu at Endor Labs for disclosing this vulnerability responsibly.</p> <p>### For more information</p> <p>If there are any questions or comments about this advisory, email Ghost at [security@ghost.org](mailto:security@ghost.org).</p> <p><strong>Affected:</strong> npm: ghost</p> <p>### Impact</p> <p>Specifically crafted malicious themes can execute arbitrary code on the server running Ghost.</p> <p>### Vulnerable Versions</p> <p>This vulnerability is present in Ghost v0.7.2 to v6.19.0.</p> <p>### Patches</p> <p>v6.19.1 contains a fix for this issue.</p> <p>### Workarounds</p> <p>Ghost generally recommends users refrain from installing untrusted themes. If a malicious theme has already been installed, it is recommended to uninstall the theme and then inspect it to understand its impact, which will be attack-specific.</p> <p>### References Ghost thanks Cristian-Alexandru Staicu at Endor Labs for disclosing this vulnerability responsibly.</p> <p>### For more information</p> <p>If there are any questions or comments about this advisory, email Ghost at [security@ghost.org](mailto:security@ghost.org).</p> https://cve.radiocsirt.org/vuln/ghsa-cgc2-rcrh-qr5x