npm/ghost: medium 5.8

Remote command injection when using sendmail email transport

Action: Upgrade ghost to 4.15.0 or later.

npm i ghost@4.15.0

Affected

Fixed versions

Sources

• osv: GHSA-wfrj-qqc2-83cm
• https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm
• https://github.com/TryGhost/Ghost/commit/93e4b2eafd18bc8e4c17924e0824e73617e7940c
• https://github.com/TryGhost/Ghost
• https://github.com/advisories/GHSA-48ww-j4fc-435p

published 2021-09-20T19:52:41Z · modified 2021-09-17T17:48:56Z · JSON