CVE-2026-105680
1 advisory.
npm/ghost CVE-2026-105680: medium 6.5, EPSS 0.27%
Ghost: Authorization Issue Allowed Author Role to Delete any Post
Action: Upgrade ghost to 6.60.0 or later.
npm i ghost@6.60.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.81.0 | 6.60.0 | - |
Fixed versions
| 6.60.0 |
Sources
- osv: GHSA-x3mg-q38v-m562
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-x3mg-q38v-m562
- https://nvd.nist.gov/vuln/detail/CVE-2026-105680
- https://github.com/TryGhost/Ghost/issues/30283
- https://github.com/TryGhost/Ghost/commit/cf2f718a67faa342c27989b701554ddd63862165
- https://github.com/TryGhost/Ghost
- https://github.com/TryGhost/Ghost/releases/tag/v6.60.0
CVE-2026-105680 · published · modified · JSON