CVE-2026-105647

The Ghost Node.js content management system is vulnerable to a Server-Side Request Forgery (SSRF) issue in versions 6.54.1 through 6.65.0 . A validation issue allows an unauthenticated user to abuse specific functionalities, such as Webmentions , to perform limited HTTP requests to hosts within t...