CVE-2026-105681 — Ghost: Authorization Bypass in Comments Feature
Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issu…
Published: 2026-10-05 · CVSS: 6.5 · CVSS 3.1
Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7