Skip to content

CVE lookup

CVE-2026-105642

Pruva has a verified reproduction for CVE-2026-105642: Ghost CMS RCE via Bookmark Card Images (SVG handling in bundled image processing library). The canonical evidence record is REPRO-2026-00380.

REPRO

REPRO-2026-00380

Package

TryGhost/Ghost · github

Severity

HIGH

Status

published