{"action":"Upgrade ghost to 4.48.8 or later.","affected":[{"fixed":"5.22.7","introduced":"5.0.0"},{"fixed":"4.48.8","introduced":"4.46.0"}],"component":"ghost","cve_ids":["CVE-2022-41654"],"ecosystem":"npm","epss":0.18914,"exploited":false,"fixed_versions":["5.22.7","4.48.8"],"ghsa_id":"GHSA-9gh8-wp53-ccc6","id":"tcs_01M5KFFV5QDE4Y192PXVJF9QK6","modified_at":"2026-07-08T06:27:48.494286055Z","published_at":"2022-11-28T22:06:24Z","references":["https://osv.dev/vulnerability/GHSA-9gh8-wp53-ccc6","https://github.com/TryGhost/Ghost/security/advisories/GHSA-9gh8-wp53-ccc6","https://nvd.nist.gov/vuln/detail/CVE-2022-41654","https://forum.ghost.org/t/security-update-available-for-ghost-4-48-7-and-5-22-6/34475","https://github.com/TryGhost/Ghost","https://talosintelligence.com/vulnerability_reports/TALOS-2022-1624"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-9gh8-wp53-ccc6","url":"https://osv.dev/vulnerability/GHSA-9gh8-wp53-ccc6"}],"summary":"ghost vulnerable to unauthorized newsletter modification via improper access controls"}