npm/ghost CVE-2026-29053: high 7.6, EPSS 5.10%

Ghost Vulnerable to Remote Code Execution via Malicious Themes

Action: Upgrade ghost to 6.19.1 or later.

npm i ghost@6.19.1

Affected

Fixed versions

Sources

• osv: GHSA-cgc2-rcrh-qr5x
• https://github.com/TryGhost/Ghost/security/advisories/GHSA-cgc2-rcrh-qr5x
• https://nvd.nist.gov/vuln/detail/CVE-2026-29053
• https://github.com/TryGhost/Ghost

CVE-2026-29053 · published 2026-03-03T20:01:21Z · modified 2026-03-07T09:41:04.560861Z · JSON