CVE-2023-31133
1 advisory.
npm/ghost CVE-2023-31133: high 7.5, EPSS 45.71%
Ghost vulnerable to information disclosure of private API fields
Action: Upgrade ghost to 5.46.1 or later.
npm i ghost@5.46.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.46.1 | - |
Fixed versions
| 5.46.1 |
Sources
- osv: GHSA-r97q-ghch-82j9
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-r97q-ghch-82j9
- https://nvd.nist.gov/vuln/detail/CVE-2023-31133
- https://github.com/TryGhost/Ghost/commit/b3caf16005289cc9909488391b4a26f3f4a66a90
- https://github.com/TryGhost/Ghost
- https://github.com/TryGhost/Ghost/releases/tag/v5.46.1
CVE-2023-31133 · published · modified · JSON