Ghost Foundation vulnerabilities
We track 2 vulnerabilities in Ghost Foundation products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Ghost Foundation vulnerabilities
- 8.1 High severity
Ghost: Improper Access Control
A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible() cascade is missing the branch that handles the combined isAuthor and isDestroy conditi
- 9.8 Critical severity
node-sqlite3: Improper Control of Dynamically-Managed Code Resources
A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerabilit