{"action":"Upgrade ghost to 6.21.1 or later.","affected":[{"fixed":"6.21.1","introduced":"6.0.9"}],"component":"ghost","cve_ids":["CVE-2026-53944"],"ecosystem":"npm","epss":0.00329,"exploited":false,"fixed_versions":["6.21.1"],"ghsa_id":"GHSA-wvp2-4qqp-4h3r","id":"tcs_01M5KGG2BDK3VW21RAB6FSG1HA","modified_at":"2026-08-04T21:30:19.858634695Z","published_at":"2026-08-04T21:13:16Z","references":["https://osv.dev/vulnerability/GHSA-wvp2-4qqp-4h3r","https://github.com/TryGhost/Ghost/security/advisories/GHSA-wvp2-4qqp-4h3r","https://nvd.nist.gov/vuln/detail/CVE-2026-53944","https://github.com/TryGhost/Ghost/pull/26749","https://github.com/TryGhost/Ghost/commit/9b7f2212970fade08ecbec543b405190471e38d4","https://github.com/TryGhost/Ghost","https://github.com/TryGhost/Ghost/releases/tag/v6.21.1"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-wvp2-4qqp-4h3r","url":"https://osv.dev/vulnerability/GHSA-wvp2-4qqp-4h3r"}],"summary":"Ghost: Private IP filtering bypass to make server-side requests to internal services"}