CVE-2026-70589

CVE-2026-70589 affects Ghost (Node.js CMS) versions 4.22.0 through 6.54.1. The vulnerability stems from a missing validation check that allowed redeeming subscription offers that were no longer active. The issue is mitigated by upgrading to 6.54.1, which applies the fix. References indicate relev...