CVE-2026-59817
1 advisory.
npm/ghost CVE-2026-59817: medium 5.3, EPSS 0.40%
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Action: Upgrade ghost to 6.44.0 or later.
npm i ghost@6.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.27.0 | 6.44.0 | - |
Fixed versions
| 6.44.0 |
Sources
- osv: GHSA-xm43-3m56-w3wf
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-xm43-3m56-w3wf
- https://nvd.nist.gov/vuln/detail/CVE-2026-59817
- https://github.com/TryGhost/Ghost/pull/28351
- https://github.com/TryGhost/Ghost/pull/28352
- https://github.com/TryGhost/Ghost/commit/cab716cd015ac04b7ee50c7a405478d97bc7b1e0
- https://github.com/TryGhost/Ghost/commit/ee7b991b466a7849c70f9d1caed8e491ee4113c6
- https://github.com/TryGhost/Ghost
CVE-2026-59817 · published · modified · JSON