- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 medium
- Weekly downloads
- 8,008
- Dependents
- 0
- Registry
- npm
Advisories 2
- CVE-2026-24778High 8.8
Ghost vulnerable to XSS via malicious Portal preview links
Affected: from 2.29.1, fixed in 2.51.5; from 2.52.0, fixed in 2.57.1.
- CVE-2024-43409Medium 6.5
Ghost's improper authentication allows access to member information and actions
Affected: from 1.22.2, fixed in 2.39.0.