Ghost: Remote Code Execution via Bookmark Card Images

Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. Vulnerable versions This...

NPM: Ghost: Remote Code Execution via Bookmark Card Images

NPM: Ghost: Remote Code Execution via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 6.56.0, 6.67.0...

GHSA-788W-68H3-CVXP Ghost: Remote Code Execution via Bookmark Card Images

Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. Vulnerable versions This...

GHSA-69QC-F5M6-889C Ghost: Stored XSS via Embed Card Previews

Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the editor, possibly resulting in compromise of that user's admin session...

NPM: Ghost: Stored XSS via Embed Card Previews

NPM: Ghost: Stored XSS via Embed Card Previews vulnerability discovered by ? in WordPress Npm ghost versions = 6.34.0, 6.67.0...

Ghost: Stored XSS via Embed Card Previews

Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the editor, possibly resulting in compromise of that user's admin session...

Ghost: Stored XSS via Bookmark Card Images

Impact When creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin...

GHSA-347Q-26QQ-H2P6 Ghost: Stored XSS via Bookmark Card Images

Impact When creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin...

NPM: Ghost: Stored XSS via Bookmark Card Images

NPM: Ghost: Stored XSS via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 5.94.0, 6.64.0...

EUVD-2026-92761

Ghost: Stored XSS via Bookmark Card Images...

ROS-20261007-73-0346

The vulnerability of the vub300disconnect function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98266 ALSA: core: Fix potential UAF after asynchronous card release

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98266: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

PT-2026-106752

Name of the Vulnerable Software and Affected Versions Microsoft.OpenApi.Kiota versions 1.25.1 through 1.34.1 Microsoft.OpenApi.Kiota.Builder versions 1.25.1 through 1.34.1 Description Kiota, an OpenAPI based HTTP Client code generator, fails to validate the x-ai-capabilities.response...

PT-2026-106595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA core. When a sound driver, such as the USB-audio driver, releases a card asynchronously using the snd card free when closed function, in-flight...

CVE-2026-105784 Joplin whiteboard card rendering allows CSS injection into application chrome

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, selecting a note containing a jsoncanvas fence causes the whiteboard text and file-node components in...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...