Ghost Foundation — Vulnerabilities & Security Advisories 8

Ghost Foundation develops the Ghost open-source publishing platform for blogs and online publications. Historically, vulnerabilities have included remote code execution, cross-site scripting (XSS), and privilege escalation, often stemming from improper input validation and access control issues. Notable security characteristics include regular security audits and a vulnerability disclosure program. While no major public incidents have been widely reported, the platform's CVE history reflects common web application risks, particularly in template handling and API endpoints. The project maintains active security practices, with recent patches addressing authentication bypass and content injection flaws, demonstrating ongoing efforts to address its eight recorded CVEs.