{"id":"EUVD-2026-39022","enisaUuid":"b354369f-375d-36a5-8261-d3cdd880bf54","description":"Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.","datePublished":"Jun 24, 2026, 6:07:42 PM","dateUpdated":"Jun 25, 2026, 5:09:22 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-chgm-3698-jm42\n","aliases":"CVE-2026-53947\nGHSA-chgm-3698-jm42\n","assigner":"GitHub_M","epss":0.35,"enisaIdProduct":[{"id":"a608cf7a-bc34-3ce4-861d-e97ab9429117","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"5.18.0, \u003c 6.21.1"}],"enisaIdVendor":[{"id":"d7e5b1f8-4876-352d-ae61-364a85bb4691","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"498eced7-6840-3ea6-bb52-35d03aae873e","vulnerability":{"id":"CVE-2026-53947","description":"Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.","datePublished":"Jun 24, 2026, 6:07:42 PM","dateUpdated":"Jun 25, 2026, 5:09:22 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-chgm-3698-jm42\n","enisa_id":"EUVD-2026-39022\n","assigner":"GitHub_M","epss":0.35,"dataProcessed":"Oct 28, 2026, 7:16:16 AM","vulnerabilityProduct":[{"id":"a5e01a6c-f3bd-38c8-8412-7eeb2b38e613","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"5.18.0, \u003c 6.21.1"}],"vulnerabilityVendor":[{"id":"af9c5c2f-065e-3d06-89d1-0ec427b463a5","vendor":{"name":"TryGhost"}}]}},{"id":"dc56dcc4-2af9-380c-a605-f6282017dd0e","vulnerability":{"id":"GHSA-chgm-3698-jm42","description":"Ghost: Member existence leak via magic link sign-in response","datePublished":"Aug 4, 2026, 9:56:13 PM","dateUpdated":"Aug 4, 2026, 9:56:13 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-chgm-3698-jm42\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53947\nhttps://github.com/TryGhost/Ghost/pull/26752\nhttps://github.com/TryGhost/Ghost/commit/fb2bb634653d99de68fc42d415721d755284fe30\nhttps://github.com/TryGhost/Ghost\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.21.1\n","enisa_id":"EUVD-2026-39022\n","aliases":"GHSA-chgm-3698-jm42\nCVE-2026-53947\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}