CVE-2026-22594
1 advisory.
npm/ghost CVE-2026-22594: high 8.1, EPSS 1.31%
Ghost has Staff 2FA bypass
Action: Upgrade ghost to 5.130.6 or later.
npm i ghost@6.11.0npm i ghost@5.130.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.11.0 | - |
| 5.105.0 | 5.130.6 | - |
Fixed versions
| 6.11.0 | 5.130.6 |
Sources
- osv: GHSA-5fp7-g646-ccf4
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-5fp7-g646-ccf4
- https://nvd.nist.gov/vuln/detail/CVE-2026-22594
- https://github.com/TryGhost/Ghost/commit/b59f707f670e6f175b669977724ccf16c718430b
- https://github.com/TryGhost/Ghost/commit/fc7bc2fb0888513498154ec5cb4b21eccb88de07
- https://github.com/TryGhost/Ghost
CVE-2026-22594 · published · modified · JSON