CVE-2026-29053
Ghost Vulnerable to Remote Code Execution via Malicious Themes
Résumé
Ghost Vulnerable to Remote Code Execution via Malicious Themes
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
ghost
[{"type":"SEMVER","events":[{"introduced":"0.7.2"},{"fixed":"6.19.1"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com