{"schema":"vulnpedia.research/1","cve":"CVE-2026-105677","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm"},{"source":"nvd","sourceId":"CVE-2026-105677","modified":"2026-10-06T15:03:59.427","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm"}]},{"url":"https://github.com/TryGhost/Ghost/issues/30635","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"nvd","sourceId":"CVE-2026-105677","modified":"2026-10-06T15:03:59.427","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://github.com/TryGhost/Ghost/issues/30635"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://github.com/TryGhost/Ghost/issues/30635"}]},{"url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"nvd","sourceId":"CVE-2026-105677","modified":"2026-10-06T15:03:59.427","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://github.com/TryGhost/Ghost/commit/d2f498694be549074dd5817fd0e8a1371b65df02"}]},{"url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T19:18:41.926Z","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"nvd","sourceId":"CVE-2026-105677","modified":"2026-10-06T15:03:59.427","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://github.com/TryGhost/Ghost/releases/tag/v6.64.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-jj74-hc2q-xrvm","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","origins":[{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://osv.dev/vulnerability/GHSA-jj74-hc2q-xrvm"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://osv.dev/vulnerability/GHSA-jj74-hc2q-xrvm"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105677","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","origins":[{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105677"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105677"}]},{"url":"https://github.com/TryGhost/Ghost","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","origins":[{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://github.com/TryGhost/Ghost"},{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://github.com/TryGhost/Ghost"}]},{"source":"euvd","sourceId":"EUVD-2026-92767","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92767","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92767","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92767"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","url":"https://osv.dev/vulnerability/GHSA-jj74-hc2q-xrvm","ecosystem":"npm","name":"ghost","purl":"pkg:npm/ghost","ranges":[{"type":"SEMVER","events":[{"introduced":"6.10.3"},{"fixed":"6.64.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-jj74-hc2q-xrvm/GHSA-jj74-hc2q-xrvm.json"},"modified":"2026-10-13T08:26:11.824680357Z","origins":[{"source":"ghsa","sourceId":"GHSA-jj74-hc2q-xrvm","modified":"2026-10-13T08:26:11.824680357Z","url":"https://osv.dev/vulnerability/GHSA-jj74-hc2q-xrvm"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}