Node.js Content Management System Vulnerability in Ghost Affecting Various Releases
CVE-2026-53946

5.4MEDIUM

Key Information:

Vendor

Tryghost

Status
Ghost
Vendor
CVE Published:
24 June 2026

What is CVE-2026-53946?

Ghost, a popular Node.js content management system, contains a vulnerability that permits authenticated staff users to redirect image card requests to potentially malicious external hosts. When posts are re-rendered, Ghost fetches image dimensions by sending outbound HTTP requests to URLs specified by users. This process neglects to restrict those URLs to trusted image hosts, exposing the system to risks where internal network resources or sensitive cloud instance metadata could be accessed. This vulnerability was subsequently addressed in version 6.21.1.

Affected Version(s)

Ghost >= 6.19.4, < 6.21.1

References

https://github.com/TryGhost/Ghost/security/advisories/GHS...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.