Threats tagged 'ghsa-9m4w-fmjw-fvjq'

CVE-2026-105645 is a vulnerability in TryGhost Ghost affecting versions from 5.37.0 up to but not including 6.67.0. It involves inefficient regular expression complexity in the external media inliner component, which can be exploited by an attacker with Administrator access to cause excessive CPU usage and render the Ghost server unresponsive. A fix for this issue is available in version 6.67.0.