CVE-2026-70589
1 advisory.
npm/ghost CVE-2026-70589: medium 4.8, EPSS 0.27%
Ghost: Archived Offers can be Redeemed
Action: Upgrade ghost to 6.54.1 or later.
npm i ghost@6.54.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.22.0 | 6.54.1 | - |
Fixed versions
| 6.54.1 |
Sources
- osv: GHSA-4wx2-7gvj-qfq3
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-4wx2-7gvj-qfq3
- https://github.com/TryGhost/Ghost/commit/d91c0fc52dfc987d71a9803dbcbe6447d21b92fb
- https://github.com/TryGhost/Ghost
CVE-2026-70589 · published · modified · JSON