How many TryGhost ghost CVEs are in CISA KEV?

None of TryGhost ghost's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of TryGhost ghost are affected?

1,664 distinct TryGhost ghost versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TryGhost ghost CVEs?

TryGhost ghost's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-203 (Observable Discrepancy).

How many critical TryGhost ghost vulnerabilities are there?

TryGhost ghost has 7 critical and 37 high-severity CVEs.

What is the average severity of TryGhost ghost CVEs?

The average CVSS base score across TryGhost ghost's scored CVEs is 6.6.

TryGhost ghost Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: TryGhost ghost vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

TryGhost ghost Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

TryGhost ghost has 102 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 20 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Severity and exploitation

How the CVSS severity of TryGhost ghost's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High37

Medium54

Low4

In CISA’s Known Exploited Vulnerabilities catalog

None of TryGhost ghost's CVEs are currently listed in CISA's KEV catalog.

Public exploits

20 of TryGhost ghost's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every TryGhost ghost version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.10.342 CVEs
6.0.041 CVEs
6.0.141 CVEs
6.0.341 CVEs
6.0.441 CVEs
6.0.541 CVEs
6.0.641 CVEs
6.0.741 CVEs
6.0.841 CVEs
5.125.140 CVEs
5.126.040 CVEs
5.127.040 CVEs

Common weakness types

The CWE weakness categories most often found in TryGhost ghost CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TryGhost ghost CVEs were published each year.

2019

2020

2021

2022

2023

2024

2025

Other TryGhost products

Browse vulnerabilities for other products by TryGhost.

node-sqlite32 CVEs sqlite32 CVEs @tryghost/portal2 CVEs express-hbs1 CVEs ghost-cli1 CVEs Ghost Portal1 CVEs @tryghost/activitypub1 CVEs @tryghost/members-csv1 CVEs

Frequently asked questions

Common questions about TryGhost ghost vulnerabilities.

How many CVEs does TryGhost ghost have?: TryGhost ghost has 102 published CVE records since 2019.
How many TryGhost ghost CVEs are in CISA KEV?: None of TryGhost ghost's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TryGhost ghost vulnerabilities?: Yes — 20 of TryGhost ghost's CVEs have a known public exploit.
Which versions of TryGhost ghost are affected?: 1,664 distinct TryGhost ghost versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TryGhost ghost CVEs?: TryGhost ghost's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-203 (Observable Discrepancy).
How many critical TryGhost ghost vulnerabilities are there?: TryGhost ghost has 7 critical and 37 high-severity CVEs.
What is the average severity of TryGhost ghost CVEs?: The average CVSS base score across TryGhost ghost's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TryGhost ghost vulnerabilities

Get an alert for each new TryGhost ghost CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Version ranges

>= 6.64.08 CVEs
5.9.4 <= v < 5.9.55 CVEs
>= 6.62.04 CVEs
5.105.0 <= v < 5.130.64 CVEs
6.0.0 <= v < 6.11.04 CVEs
>= 6.34.03 CVEs
>= 6.58.03 CVEs
5.9.0 <= v < 6.44.13 CVEs
>= 0.10.0, < 6.54.12 CVEs
>= 4.0.0, < 6.67.02 CVEs
>= 6.0.9, < 6.21.12 CVEs
>= 6.19.4, < 6.21.12 CVEs
>= 6.44.12 CVEs
>= 6.57.12 CVEs
>= 6.63.02 CVEs
0.10.0 <= v < 6.54.12 CVEs
0.5.0 <= v < 6.64.02 CVEs
0.7.2 <= v < 6.64.02 CVEs
1.18.0 <= v < 6.27.02 CVEs
1.20.0 <= v < 6.64.02 CVEs
2.5.0 <= v < 6.64.02 CVEs
4.0.0 <= v < 6.67.02 CVEs
4.39.0 <= v < 6.64.02 CVEs
5.94.0 <= v < 6.64.02 CVEs
6.0.9 <= v < 6.21.12 CVEs
6.10.3 <= v < 6.64.02 CVEs
6.14.0 <= v < 6.27.02 CVEs
6.19.4 <= v < 6.21.12 CVEs
6.22.1 <= v < 6.64.02 CVEs
< 3.1.01 CVE
< 3.10.01 CVE
< 5.110.41 CVE
< 5.42.11 CVE
< 5.46.11 CVE
< 5.59.11 CVE
< 5.76.01 CVE
< 5.82.01 CVE
< 5.82.111 CVE
< 6.20.01 CVE
< 6.54.11 CVE
<= 4.39.01 CVE
<= 5.76.01 CVE
>= 0.5.0, < 6.64.01 CVE
>= 0.7.2, < 6.19.11 CVE
>= 0.7.2, < 6.64.01 CVE
>= 1.18.0, < 6.27.01 CVE
>= 1.20.0, < 6.64.01 CVE
>= 1.20.1, < 6.54.11 CVE
>= 2.2.0, < 6.54.11 CVE
>= 2.5.0, < 6.64.01 CVE
>= 3.1.01 CVE
>= 3.24.0, < 6.19.11 CVE
>= 4.0.0, < 4.10.01 CVE
>= 4.0.0, < 4.3.31 CVE
>= 4.0.0, < 6.37.01 CVE
>= 4.22.0, < 6.54.11 CVE
>= 4.22.0, < 6.65.01 CVE
>= 4.39.0, < 6.64.01 CVE
>= 4.46.0 < 5.89.51 CVE
>= 4.9.0, < 6.54.11 CVE
>= 5.101.6, < 6.19.31 CVE
>= 5.18.0, < 6.21.11 CVE
>= 5.26.0, < 6.54.11 CVE
>= 5.37.0, < 6.67.01 CVE
>= 5.46.1, < 6.21.21 CVE
>= 5.81.0, < 6.60.01 CVE
>= 5.9.0, < 6.44.11 CVE
>= 5.94.0, < 6.64.01 CVE
>= 6.0.9, < 6.65.01 CVE
>= 6.10.3, < 6.64.01 CVE
>= 6.14.0, < 6.27.01 CVE
>= 6.20.01 CVE
>= 6.22.1, < 6.64.01 CVE
>= 6.23.01 CVE
>= 6.26.0, < 6.54.11 CVE
>= 6.27.01 CVE
>= 6.27.0, < 6.44.01 CVE
>= 6.34.0, < 6.67.01 CVE
>= 6.50.01 CVE
>= 6.51.01 CVE
>= 6.54.1, < 6.65.01 CVE
>= 6.56.01 CVE
>= 6.56.0, < 6.67.01 CVE
0.5.0 <= v < 6.23.01 CVE
0.5.0 <= v < 6.62.01 CVE
0.5.3 <= v < 6.50.01 CVE
0.7.2 <= v < 6.19.11 CVE
0.8.0 <= v < 6.23.01 CVE
1.0.0 <= v < 6.62.01 CVE
1.20.1 <= v < 6.54.11 CVE
2.10.0 <= v < 6.63.01 CVE
2.2.0 <= v < 6.54.11 CVE
2.21.0 <= v < 6.56.01 CVE
2.29.1 <= v < 2.51.51 CVE
2.5.0 <= v < 6.34.01 CVE
2.52.0 <= v < 2.57.11 CVE
3.10.0 <= v < 6.34.01 CVE
3.20.2 <= v < 6.51.01 CVE
3.23.0 <= v < 6.23.01 CVE
3.24.0 <= v < 6.19.11 CVE
4.0.0 <= v < 4.10.01 CVE
4.0.0 <= v < 4.3.31 CVE
4.0.0 <= v < 6.37.01 CVE
4.0.0 <= v < 6.63.01 CVE
4.22.0 <= v < 6.54.11 CVE
4.22.0 <= v < 6.65.01 CVE
4.3.0 <= v < 6.58.01 CVE
4.39.0 <= v < 4.39.11 CVE
4.42.0 <= v < 4.42.11 CVE
4.46.0 <= v < 4.48.81 CVE
4.46.0 <= v < 5.89.51 CVE
4.9.0 <= v < 6.54.11 CVE
5.0.0 <= v < 5.22.71 CVE
5.101.6 <= v < 6.19.31 CVE
5.121.0 <= v < 5.130.61 CVE
5.125.1 <= v < 6.57.11 CVE
5.18.0 <= v < 6.21.11 CVE
5.18.0 <= v < 6.21.21 CVE
5.19.0 <= v < 6.57.11 CVE
5.2.0 <= v < 6.62.01 CVE
5.26.0 <= v < 6.54.11 CVE
5.3.0 <= v < 6.58.01 CVE
5.3.0 <= v < 6.62.01 CVE
5.35.0 <= v < 5.35.11 CVE
5.37.0 <= v < 6.67.01 CVE
5.38.0 <= v < 5.130.61 CVE
5.42.2 <= v < 6.58.01 CVE
5.43.0 <= v < 5.121.01 CVE
5.46.1 <= v < 6.21.21 CVE
5.8.0 <= v < 6.34.01 CVE
5.81.0 <= v < 6.60.01 CVE
5.90.0 <= v < 5.130.61 CVE
5.99.0 <= v < 5.130.41 CVE
5.99.0 <= v < 5.130.51 CVE
6.0.0 <= v < 6.0.91 CVE
6.0.0 <= v < 6.15.01 CVE
6.0.9 <= v < 6.21.21 CVE
6.0.9 <= v < 6.65.01 CVE
6.19.4 <= v < 6.21.21 CVE
6.20.0 <= v < 6.57.11 CVE
6.26.0 <= v < 6.54.11 CVE
6.27.0 <= v < 6.44.01 CVE
6.34.0 <= v < 6.67.01 CVE
6.54.1 <= v < 6.65.01 CVE
6.56.0 <= v < 6.67.01 CVE

Fixed in

2fa451a7dca010016608065ad33bcc58c004307016 CVEs
6.64.016 CVEs
6.54.19 CVEs
94e25d9de158bc10b6a74d9aad75944b1a68ee138 CVEs
1d36c589d39f979327106bbcfb4cece7abaea5025 CVEs
5.9.55 CVEs
6.21.15 CVEs
6.67.05 CVEs
2daa6eba775c961ca41f2732b622d9deb86a39ee4 CVEs
5.130.64 CVEs
6.11.04 CVEs
6.21.24 CVEs
6.27.04 CVEs
6.62.04 CVEs
67e137d8b0dd70cd5f486bfeea5d1643cee061044 CVEs
a07c753c8a08c38d264b429b2a19873b152c097a4 CVEs
b88c3e120ed108002e7083ae45abaa5d31d0e1cf4 CVEs
10da09186253d7be24698d3a5512c7f9cbea13a43 CVEs
2cea6f5bd9ba0433e36e39ebe86d6bb25150d6a93 CVEs
33d716a034a25824e9bd2fce8e2e394122421b413 CVEs
6.23.03 CVEs
6.34.03 CVEs
6.44.13 CVEs
6.57.13 CVEs
6.58.03 CVEs
6.65.03 CVEs
8d5bded685b9b2019d47e298dc4594a1c40495573 CVEs
e35ef3eab8cf5a02b31ee9163848ac996f20e8003 CVEs
e494949a92346da25e5bbed29e16ff586e99f8573 CVEs
ef3a6ceb761c263f573745e9c744838803231f953 CVEs
4cb7e7956356a47e2c2c240588ef32ecd9fddeaa2 CVEs
4fb587e4d49667f929b87f7d6a873ae5e9cc087f2 CVEs
6.19.12 CVEs
6.63.02 CVEs
631014be041d42f95f0ba10c39ff4b0e179bc43b2 CVEs
88ae6d6d56f8a239cb38a8c89de02f034f50e2ce2 CVEs
a8bea3a4ceec4c852b880f4885119453c3d8588e2 CVEs
af0f06d49809e7504f9ab85380037290019f79ba2 CVEs
d2f498694be549074dd5817fd0e8a1371b65df022 CVEs
1562834354966ab7e7330fcf25a82e522d4a0a191 CVE
17025cd344e2cded3aae69416281826606d07d1d1 CVE
1be06f4e95a5eb159d14abda7660e689af13cff11 CVE
2.51.51 CVE
2.57.11 CVE
2034eac6342ad0b206b8cbf826fba39cbcea56ca1 CVE
20d3f792bf4a7c349ee56b746a067550d8684ff51 CVE
2adee64de295dde3be257fd3f22e503f577bb62c1 CVE
3.1.01 CVE
3.10.01 CVE
378dd913aa8d0fd0da29b0ffced8884579598b0f1 CVE
3832352c5ac17546e826ddf709b6cdc5f4c3182e1 CVE
392e6feaad7ec0bf37e8089fa524c15ec863d3e31 CVE
3b0f99d455c1a4ee0fd233f0fdf732129b83a8f01 CVE
3f8594eb53de883ac017545c358f59039cb152de1 CVE
4.10.01 CVE
4.3.31 CVE
4.39.11 CVE
4.42.11 CVE
4.48.81 CVE
405c2623ff9060295d4a87d3a0eb4ef766c8d2d31 CVE
42dd01fb05574217adc8b77bb2bbc85149c332b01 CVE
431d483b26fc62749611536dfb54fa1bac4ae06a1 CVE
5.110.41 CVE
5.121.01 CVE
5.130.41 CVE
5.130.51 CVE
5.22.71 CVE
5.35.11 CVE
5.42.11 CVE
5.46.11 CVE
5.59.11 CVE
5.76.01 CVE
5.82.01 CVE
5.82.111 CVE
5.89.51 CVE
52ccd4648f49c88137e949b45cc14aa91ace3d1b1 CVE
58669d5c8b898f8b69c1287c2779b29ecc7eb9181 CVE
5ef16abe85e9b71ac3f1b1e2cbc462802efe3b5b1 CVE
5eff2de0f477b11c88f20bceb9d184c0d3b8a62e1 CVE
6.0.91 CVE
6.15.01 CVE
6.19.31 CVE
6.20.01 CVE
6.37.01 CVE
6.44.01 CVE
6.50.01 CVE
6.51.01 CVE
6.56.01 CVE
6.60.01 CVE
62d31bc65d92e2893358abc9e01f0b02fb31ae001 CVE
63c31fad7e473caa62d8fbb4651a04a2a62b5d001 CVE
6b1c85c30dd0bacb4d5ffe64fc675ac9342d800c1 CVE
770d438fd9d352bbfccbe81dd890580a1d3fd6f01 CVE
80686226d23df56749f6b7ebb484850a8eba80721 CVE
815962dd2760e55c5dc8d0fb7fac732a7634566f1 CVE
84bbcbb05799f60cd67ed28f85287d20e6e378011 CVE
89cf224a2afeae9410b7a3f4e3e03898c4316baf1 CVE
8f3fbfb79de537c04c645b57ebe9d892caf46c341 CVE
96aa0e6ba6b48a292c029ead437c00e30ac073ea1 CVE
99c5642b9bb481df4811a004a6f19d6143ed9aaf1 CVE
9a3d66f39e6555123bbc17d8616aa1ce4ec93ca91 CVE
9da77c9302b617707699b3e8fb69c586648a65801 CVE
b41fe3f2c399cef058e6b487782a0b2263e86c031 CVE
b6195d204cf395b7216a63c4dde2cd1775f529481 CVE
b8cf9d9beb9854466b5a2ebb85ad40a290daf68b1 CVE
c076dcc64d4af99dca0ecc380d5f4df04fc2a0fd1 CVE
cab716cd015ac04b7ee50c7a405478d97bc7b1e01 CVE
cf2f718a67faa342c27989b701554ddd638621651 CVE
d23d552e257e2696c60293bc5cd7898a49d6bd1f1 CVE
d71c0bb6e4bf947437ee7e8559fac506a9c77bb71 CVE
d91c0fc52dfc987d71a9803dbcbe6447d21b92fb1 CVE
da858e640e88e69c1773a7b7ecdc2008fa1438491 CVE
dac25612520b571f58679764ecc27109e641d1db1 CVE
e8836652ccf8f6f39910ad8136de2692db1c3b4d1 CVE
ea80639878c0be2f0dc58ec6900411f259db232c1 CVE
ee7b991b466a7849c70f9d1caed8e491ee4113c61 CVE
eecd79a87519fb4d8006764f875c188f6a6862b81 CVE
f2f8bfb39db97d1d3b1798ef95aaacf7d66e6cf91 CVE
f466c300191a609ed36c8d7c5d1e33ccd440786b1 CVE
fbaa92327e52607036a1e42204c9eadcc751d82c1 CVE