MEDIUM6.5npm
GHSA-78x2-cwp9-5j42· BIT-ghost-2024-43409, CVE-2024-43409Ghost's improper authentication allows access to member information and actions
Modified: 10/29/2024
package
npm/@tryghost/portal
pkg:npm/%40tryghost/portal
HIGH8.8npm
GHSA-gv6q-2m97-882h· BIT-ghost-2026-24778, CVE-2026-24778Ghost vulnerable to XSS via malicious Portal preview links
Modified: 2/3/2026