{"action":"Upgrade ghost to 5.46.1 or later.","affected":[{"fixed":"5.46.1","introduced":"0"}],"component":"ghost","cve_ids":["CVE-2023-31133"],"ecosystem":"npm","epss":0.45713,"exploited":false,"fixed_versions":["5.46.1"],"ghsa_id":"GHSA-r97q-ghch-82j9","id":"tcs_01M5KG8KDSGM1RMRT6JFXZN78R","modified_at":"2026-09-10T03:50:08.181521856Z","published_at":"2023-05-03T21:57:10Z","references":["https://osv.dev/vulnerability/GHSA-r97q-ghch-82j9","https://github.com/TryGhost/Ghost/security/advisories/GHSA-r97q-ghch-82j9","https://nvd.nist.gov/vuln/detail/CVE-2023-31133","https://github.com/TryGhost/Ghost/commit/b3caf16005289cc9909488391b4a26f3f4a66a90","https://github.com/TryGhost/Ghost","https://github.com/TryGhost/Ghost/releases/tag/v5.46.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r97q-ghch-82j9","url":"https://osv.dev/vulnerability/GHSA-r97q-ghch-82j9"}],"summary":"Ghost vulnerable to information disclosure of private API fields"}