https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-07T16:17:49.706348+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-105642 CVE-2026-105642 — Ghost: Remote Code Execution via Bookmark Card Images 2026-10-07T16:17:49.708708+00:00

Affected: TryGhost Ghost

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. This issue is fixed in version 6.67.0.