CVE-2026-53945: Ghost: Server-side request forgery via DNS rebinding in external request handling
Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghost server into reaching hosts on internal networks through features that issue external fetches.
References
- github.com/TryGhost/Ghost/commit/07d604100eb3df5c9b382fce6232928c96329448
- github.com/TryGhost/Ghost/pull/26754
- github.com/TryGhost/Ghost/releases/tag/v6.21.1
- github.com/TryGhost/Ghost/security/advisories/GHSA-ch52-px8q-f22j
- github.com/advisories/GHSA-ch52-px8q-f22j
- nvd.nist.gov/vuln/detail/CVE-2026-53945
Code Behaviors & Features
Detect and mitigate CVE-2026-53945 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →