CVE lookup
CVE-2026-105642
Pruva has a verified reproduction for CVE-2026-105642: Ghost CMS RCE via Bookmark Card Images (SVG handling in bundled image processing library). The canonical evidence record is REPRO-2026-00380.
REPRO
REPRO-2026-00380
Package
TryGhost/Ghost · github
Severity
HIGH
Status
published