CVE-2026-105645

4.9 Moyenne

Publiée le 05/10/2026 à 21:17 · Modifiée le 06/10/2026 à 17:03 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0.

Traduire en français

Produits concernés

TryGhost Ghost

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.9 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-1333

Références

https://github.com/TryGhost/Ghost/commit/88ae6d6d56f8a239cb38a8c89de02f034f50e2ce
https://github.com/TryGhost/Ghost/issues/31058
https://github.com/TryGhost/Ghost/releases/tag/v6.66.0
https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m4w-fmjw-fvjq

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories