CVE-2026-105644

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions. This issue is fixed in version 6.67.0.

• CWE-79
• CWE-434

• https://github.com/TryGhost/Ghost/commit/1be06f4e95a5eb159d14abda7660e689af13cff1
• https://github.com/TryGhost/Ghost/pull/31060
• https://github.com/TryGhost/Ghost/releases/tag/v6.66.0
• https://github.com/TryGhost/Ghost/security/advisories/GHSA-hqq2-xqr2-fmx2

Published

Oct 5, 2026

Last Modified

Oct 6, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105639Plane is an open-source project management tool. Prior to 1.…9.8
• CVE-2026-10564IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side …8.2
• CVE-2026-105640Plane is an open-source project management tool. Prior to 1.…9.1
• CVE-2026-105641Plane is an open-source project management tool. Prior to 1.…9.8
• CVE-2026-105642Ghost is a Node.js content management system. From 6.56.0 un…8.8
• CVE-2026-105643Ghost is a Node.js content management system. From version 6…7.3
• CVE-2026-105645Ghost is a Node.js content management system. From 5.37.0 un…4.9
• CVE-2026-105646Ghost is a Node.js content management system. From 4.0.0 unt…4.9
• CVE-2026-105647Ghost is a Node.js content management system. From 6.54.1 un…4
• CVE-2026-105648Ghost is a Node.js content management system. From 6.0.9 unt…4
• CVE-2026-105649Ghost is a Node.js content management system. From 4.22.0 un…7.3
• CVE-2026-10565A security flaw has been discovered in Open5GS up to 2.7.6. …3.1