CVE-2026-29053
Ghost Vulnerable to Remote Code Execution via Malicious Themes
Summary
Ghost Vulnerable to Remote Code Execution via Malicious Themes
Original description
The description as published by the source.
Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
ghost
[{"type":"SEMVER","events":[{"introduced":"0.7.2"},{"fixed":"6.19.1"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com