Threats tagged 'ghsa-53vv-xm9f-mm82'

CVE-2026-105652 is a low-severity vulnerability in TryGhost Ghost versions from 0.7.2 up to but not including 6.64.0. It allows any staff-level user to observe the relative ordering of other staff users' hashed passwords. This information disclosure does not reveal the actual password hashes nor does it provide a practical method to recover passwords. The issue is fixed in version 6.64.0.