https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:30:25 +0000 https://cve.radiocsirt.org/vuln/bit-ghost-2026-53946 <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet. This vulnerability is fixed in 6.21.1.</p> <p><strong>Affected:</strong> Bitnami: ghost</p> <p>Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet. This vulnerability is fixed in 6.21.1.</p> https://cve.radiocsirt.org/vuln/bit-ghost-2026-53946 https://cve.radiocsirt.org/vuln/euvd-2026-330396 EUVD-2026-330396 https://cve.radiocsirt.org/vuln/euvd-2026-330396 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53946 <p>Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet. This vulnerability is fixed in 6.21.1.</p> <p>Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet. This vulnerability is fixed in 6.21.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53946 https://cve.radiocsirt.org/vuln/ghsa-g366-23fw-ggp6 <p><strong>Affected:</strong> npm: ghost</p> <p>### Impact</p> <p>When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet.</p> <p>### Vulnerable versions</p> <p>This vulnerability is present in Ghost from v6.19.3 up to v6.21.0.</p> <p>### Patches</p> <p>v6.21.1 contains a fix for this issue.</p> <p>### How to update</p> <p>For self-hosters using Docker, find [Docker&#39;s official Ghost image here](https://hub.docker.com/_/ghost). Updating a Docker-based Ghost instance [is documented here](https://docs.ghost.org/install/docker#updating-ghost).</p> <p>If your Ghost is a Ghost-CLI install see our documentation on [updating it to the latest version here](https://docs.ghost.org/update).</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at [security@ghost.org](mailto:security@ghost.org).</p> <p><strong>Affected:</strong> npm: ghost</p> <p>### Impact</p> <p>When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card at an attacker-chosen host and cause the Ghost server to request it on their behalf, including hosts on internal networks or cloud instance metadata endpoints that would not normally be reachable from the public internet.</p> <p>### Vulnerable versions</p> <p>This vulnerability is present in Ghost from v6.19.3 up to v6.21.0.</p> <p>### Patches</p> <p>v6.21.1 contains a fix for this issue.</p> <p>### How to update</p> <p>For self-hosters using Docker, find [Docker&#39;s official Ghost image here](https://hub.docker.com/_/ghost). Updating a Docker-based Ghost instance [is documented here](https://docs.ghost.org/install/docker#updating-ghost).</p> <p>If your Ghost is a Ghost-CLI install see our documentation on [updating it to the latest version here](https://docs.ghost.org/update).</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at [security@ghost.org](mailto:security@ghost.org).</p> https://cve.radiocsirt.org/vuln/ghsa-g366-23fw-ggp6