CVE-2026-22596 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/e…
Medium CVSS: 6.7

CVE-2026-22596

Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. This issue has been patched in versions 5.130.6 and 6.11.0.
Vendor
Ghost
Product
Ghost
CWE
CWE-89
Yayın Tarihi
2026-01-10 03:15:50
Güncelleme
2026-01-15 18:35:34
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Ghost MEDIUM Ghost 2026

Referanslar

https://github.com/TryGhost/Ghost/commit/cda236e455a7a30e828b6cba3c430e5796ded955 https://github.com/TryGhost/Ghost/commit/f2165f968bcdaae0e35590b38fa280ab03239391 https://github.com/TryGhost/Ghost/security/advisories/GHSA-gjrp-xgmh-x9qq