{"schema":"vulnpedia.research/1","cve":"CVE-2026-105676","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6"},{"source":"nvd","sourceId":"CVE-2026-105676","modified":"2026-10-06T15:17:14.143","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6"}]},{"url":"https://github.com/TryGhost/Ghost/issues/30635","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"nvd","sourceId":"CVE-2026-105676","modified":"2026-10-06T15:17:14.143","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost/issues/30635"}]},{"url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"nvd","sourceId":"CVE-2026-105676","modified":"2026-10-06T15:17:14.143","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"}]},{"url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:16:20.623Z","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"nvd","sourceId":"CVE-2026-105676","modified":"2026-10-06T15:17:14.143","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-m382-6jw4-fmp6","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","origins":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://osv.dev/vulnerability/GHSA-m382-6jw4-fmp6"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://osv.dev/vulnerability/GHSA-m382-6jw4-fmp6"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105676","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","origins":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105676"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105676"}]},{"url":"https://github.com/TryGhost/Ghost/pull/30635","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","origins":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost/pull/30635"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost/pull/30635"}]},{"url":"https://github.com/TryGhost/Ghost","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","origins":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://github.com/TryGhost/Ghost"},{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://github.com/TryGhost/Ghost"}]},{"source":"euvd","sourceId":"EUVD-2026-92766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92766","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92766"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","url":"https://osv.dev/vulnerability/GHSA-m382-6jw4-fmp6","ecosystem":"npm","name":"ghost","purl":"pkg:npm/ghost","ranges":[{"type":"SEMVER","events":[{"introduced":"1.20.0"},{"fixed":"6.64.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-m382-6jw4-fmp6/GHSA-m382-6jw4-fmp6.json"},"modified":"2026-10-13T08:25:39.518829847Z","origins":[{"source":"ghsa","sourceId":"GHSA-m382-6jw4-fmp6","modified":"2026-10-13T08:25:39.518829847Z","url":"https://osv.dev/vulnerability/GHSA-m382-6jw4-fmp6"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}