CVE-2026-105649: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site’s domain, possibly resulting in compromise of other staff users’ admin sessions.
References
- github.com/TryGhost/Ghost/commit/80686226d23df56749f6b7ebb484850a8eba8072
- github.com/TryGhost/Ghost/issues/30919
- github.com/TryGhost/Ghost/releases/tag/v6.65.0
- github.com/TryGhost/Ghost/security/advisories/GHSA-8575-cr6v-7jh4
- github.com/advisories/GHSA-8575-cr6v-7jh4
- nvd.nist.gov/vuln/detail/CVE-2026-105649
Code Behaviors & Features
Detect and mitigate CVE-2026-105649 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →