Ghost Cache-poisoning XSS via x-ghost-preview header (GHSA-62q6-4hv4-yjvw)

github.com 2026-06-27查看中文 →

Security AdvisoryGHSA-62q6-4hv4-yjvwCriticalGhost

Affected:

Ghost v4.0.0
Ghost v6.36.0

Fixed in:

v6.37.0

Referenced CVEs: CVE-2026-53943 · 9.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Apache Airflow Azure AD OAuth Identity Bypass via Missing Signature Verification Fix 2026-07-29 Apache Kyubi Engine UI Proxy Configuration Vulnerability Fix and Hardening Guide 2026-07-29 Netty CVE-2025-56822: Race Condition in OcsServerCertificateValidator Async OCSP Validation 2026-07-29 Netty Out-of-date OCSP Response Accepted - Certificate Revocation Bypass 2026-07-29 ClickHouse Client SQL Injection via Trailing Backslash 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive