CVE-2026-105646

4.9 Moyenne

Publiée le 05/10/2026 à 21:17 · Modifiée le 08/10/2026 à 00:17 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0.

Traduire en français

Produits concernés

TryGhost Ghost

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.9 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-1333

Références

https://github.com/TryGhost/Ghost/commit/88ae6d6d56f8a239cb38a8c89de02f034f50e2ce
https://github.com/TryGhost/Ghost/pull/31058
https://github.com/TryGhost/Ghost/releases/tag/v6.66.0
https://github.com/TryGhost/Ghost/security/advisories/GHSA-fwh9-qg68-vxp4

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories