{"id":"EUVD-2026-92621","enisaUuid":"cadac6e3-e7dc-3428-aed1-7403d6bbcc39","description":"Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. This issue is fixed in version 6.67.0.","datePublished":"Oct 5, 2026, 6:31:05 PM","dateUpdated":"Oct 5, 2026, 7:04:08 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp\n","aliases":"CVE-2026-105642\nGHSA-788w-68h3-cvxp\n","assigner":"GitHub_M","epss":0.27,"enisaIdProduct":[{"id":"3ea6e22b-76c6-3435-96e6-ffa8a021218d","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.56.0, \u003c 6.67.0"}],"enisaIdVendor":[{"id":"5b8eb66b-dc7c-3a6a-bc8f-8f92507578e1","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"20b120c7-8242-3cd2-a0de-b983f16fa0bc","vulnerability":{"id":"CVE-2026-105642","description":"Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. This issue is fixed in version 6.67.0.","datePublished":"Oct 5, 2026, 6:31:05 PM","dateUpdated":"Oct 5, 2026, 7:04:08 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp\n","enisa_id":"EUVD-2026-92621\n","assigner":"GitHub_M","epss":0.27,"dataProcessed":"Nov 6, 2026, 7:17:09 AM","vulnerabilityProduct":[{"id":"a74b88b9-82af-3873-9dfc-58e743ed5c98","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.56.0, \u003c 6.67.0"}],"vulnerabilityVendor":[{"id":"4e49ef7f-da64-37a1-a4f1-db6ed933305c","vendor":{"name":"TryGhost"}}]}},{"id":"2b045e39-b9eb-3d4d-b02b-7de633525edf","vulnerability":{"id":"GHSA-788w-68h3-cvxp","description":"Ghost: Remote Code Execution via Bookmark Card Images","datePublished":"Oct 7, 2026, 8:43:08 PM","dateUpdated":"Oct 7, 2026, 8:43:08 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105642\nhttps://github.com/TryGhost/Ghost\n","enisa_id":"EUVD-2026-92621\n","aliases":"CVE-2026-105642\nGHSA-788w-68h3-cvxp\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}