{"action":"Upgrade ghost to 6.54.1 or later.","affected":[{"fixed":"6.54.1","introduced":"1.20.1"}],"component":"ghost","cve_ids":["CVE-2026-70592"],"ecosystem":"npm","epss":0.00437,"exploited":false,"fixed_versions":["6.54.1"],"ghsa_id":"GHSA-cj62-hvv2-2q5h","id":"tcs_01M5KFJYEPQVC2F6F02Z104ERD","modified_at":"2026-08-17T08:10:29.638764057Z","published_at":"2026-08-04T21:41:33Z","references":["https://osv.dev/vulnerability/GHSA-cj62-hvv2-2q5h","https://github.com/TryGhost/Ghost/security/advisories/GHSA-cj62-hvv2-2q5h","https://github.com/TryGhost/Ghost/commit/f466c300191a609ed36c8d7c5d1e33ccd440786b","https://github.com/TryGhost/Ghost","https://github.com/TryGhost/Ghost/releases/tag/v6.54.1"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-cj62-hvv2-2q5h","url":"https://osv.dev/vulnerability/GHSA-cj62-hvv2-2q5h"}],"summary":"Ghost: Database Backup Path Traversal"}