https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T07:27:43.223960+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103291 fkie_cve-2026-103291 2026-10-03T07:27:43.225777+00:00

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network endpoints to access metadata services and internal resources unavailable from the public internet.

 https://db.gcve.eu/vuln/ghsa-x8f4-ghf2-wcmp GHSA-x8f4-ghf2-wcmp 2026-10-03T07:27:43.225849+00:00

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network endpoints to access metadata services and internal resources unavailable from the public internet.