How many CVEs have a located fix in TryGhost/Ghost?

48 published CVEs have a fix traced to functions in TryGhost/Ghost, touching 138 functions across 113 files.

Which function in TryGhost/Ghost has been patched by the most CVEs?

query in ghost/core/core/server/api/endpoints/pages.js has been changed by 4 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in TryGhost/Ghost?

The median fix changes 56 lines. 31% of fixes change 20 lines or fewer, and 27% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

javascript

typescript

#83 of 500 repositories

TryGhost/Ghost

Name: TryGhost/Ghost: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 5, 2026

48

CVE fixes located

Published CVEs

138

Functions patched

Distinct function sites

113

Files patched

Distinct source files

2021–2026

Years covered

By CVE publication date

Overview

48 published CVEs have a fix traced to functions in TryGhost/Ghost, the earliest published in 2021. Those fixes changed 138 distinct functions across 113 files, in 1,103 patch hunks.

Among the 500 repositories tracked here, TryGhost/Ghost ranks #83 by the number of CVEs with a located fix.

Most patched functions

Functions in TryGhost/Ghost changed by the most CVE fixes.

Most patched files

Files in TryGhost/Ghost changed by the most CVE fixes.

1ghost/core/core/server/lib/request-external.js4 CVEs · 4 functions
2ghost/core/core/server/services/oembed/oembed-service.js4 CVEs · 2 functions
3ghost/core/core/server/api/endpoints/pages.js4 CVEs · 1 functions
4ghost/core/core/server/api/endpoints/posts.js4 CVEs · 1 functions
5ghost/core/core/server/services/auth/session/session-service.js3 CVEs · 8 functions
6ghost/core/core/server/services/media-inliner/external-media-inliner.js3 CVEs · 5 functions
7ghost/core/core/server/api/endpoints/utils/api-filter-utils.ts3 CVEs · 4 functions
8ghost/core/core/server/web/api/middleware/upload.js3 CVEs · 3 functions
9ghost/core/core/server/services/members/members-api/controllers/router-controller.js3 CVEs · 2 functions
10ghost/core/core/server/data/importer/handlers/image.js3 CVEs · 0 functions

Fix size

How much code a CVE fix in TryGhost/Ghost changes, with backports counted once.

56

Median lines changed

Added plus removed, per CVE

31%

Fixes of 20 lines or fewer

Share of CVE fixes

27%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in TryGhost/Ghost, and the functions each fix changed.

Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
CVE-2026-105683_normalizeStorageRelativePath read exists
Low · CVSS 3.8
EPSS 0.3%2026-10-05
Ghost: Server-Side Request Forgery in Webhook Trigger
CVE-2026-105682WebhookTrigger
Low · CVSS 2.7
EPSS 0.2%2026-10-05
Ghost: Authorization Bypass in Comments Feature
CVE-2026-105681CommentsService withPinnedSelect browse
Medium · CVSS 6.5
EPSS 0.3%2026-10-05
Ghost: Authorization Issue Allowed Author Role to Delete any Post
CVE-2026-105680
Medium · CVSS 6.5
EPSS 0.3%2026-10-05
Ghost: Stored XSS via File Uploads on Local Storage
CVE-2026-105679setServeHeaders serve
High · CVSS 7.3
EPSS 0.2%2026-10-05
Ghost: Editors Could Promote Staff Users to Their Own Role
CVE-2026-105678canThis
Medium · CVSS 4.3
EPSS 0.2%2026-10-05
Ghost: Remote Code Execution via Theme Translation Files
CVE-2026-105677constructor publicAppViteConfig SearchIndex
High · CVSS 7.2
EPSS 0.5%2026-10-05
Ghost: Path Traversal via Locale Setting
CVE-2026-105676constructor publicAppViteConfig SearchIndex
Medium · CVSS 4.9
EPSS 0.4%2026-10-05
Ghost: Invite Token Disclosure in Ghost Admin API
CVE-2026-105675isAdminApiRestrictedOrderField query getOrderAttributes
High · CVSS 7.5
EPSS 0.4%2026-10-05
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
CVE-2026-105652isAdminApiRestrictedOrderField query getOrderAttributes
Low · CVSS 3.1
EPSS 0.3%2026-10-05
Ghost: Stored XSS via Bookmark Card Images
CVE-2026-105651OEmbedService
High · CVSS 7.3
EPSS 0.3%2026-10-05
Ghost: Stored XSS via oEmbed Photo Responses
CVE-2026-105650OEmbedService
High · CVSS 8.1
EPSS 0.3%2026-10-05

Get an alert for each new TryGhost/Ghost CVE, with the patched functions and AI-written analysis.

Monitor Ghost CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

makeplane/plane48 CVEs pjsip/pjproject48 CVEs libarchive/libarchive47 CVEs android.googlesource.com/platform-packages-modules-Bluetooth46 CVEs dataease/dataease51 CVEs fusionpbx/fusionpbx51 CVEs patriksimek/vm251 CVEs debian/qemu52 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in TryGhost/Ghost.

How many CVEs have a located fix in TryGhost/Ghost?: 48 published CVEs have a fix traced to functions in TryGhost/Ghost, touching 138 functions across 113 files.
Which function in TryGhost/Ghost has been patched by the most CVEs?: query in ghost/core/core/server/api/endpoints/pages.js has been changed by 4 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in TryGhost/Ghost?: The median fix changes 56 lines. 31% of fixes change 20 lines or fewer, and 27% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track TryGhost/Ghost CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing