npm/ghost CVE-2026-70592: medium 5.5, EPSS 0.44%
Ghost: Database Backup Path Traversal
Action: Upgrade ghost to 6.54.1 or later.
npm i ghost@6.54.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.20.1 | 6.54.1 | - |
Fixed versions
| 6.54.1 |
Sources
- osv: GHSA-cj62-hvv2-2q5h
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-cj62-hvv2-2q5h
- https://github.com/TryGhost/Ghost/commit/f466c300191a609ed36c8d7c5d1e33ccd440786b
- https://github.com/TryGhost/Ghost
- https://github.com/TryGhost/Ghost/releases/tag/v6.54.1
CVE-2026-70592 · published · modified · JSON