https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T10:46:53.518409+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103281 fkie_cve-2026-103281 2026-10-03T10:46:53.537123+00:00

Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.

 https://db.gcve.eu/vuln/ghsa-crq6-86x9-65hj GHSA-crq6-86x9-65hj 2026-10-03T10:46:53.537197+00:00

Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.