CVE-2026-59817: Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
A vulnerability in Ghost’s public donation checkout flow allowed an unauthenticated attacker to obtain full paid gift memberships for a minimal payment. No customer or member data was exposed, and the issue could not be used to steal money from a site or its members.
References
- github.com/TryGhost/Ghost/commit/cab716cd015ac04b7ee50c7a405478d97bc7b1e0
- github.com/TryGhost/Ghost/commit/ee7b991b466a7849c70f9d1caed8e491ee4113c6
- github.com/TryGhost/Ghost/pull/28351
- github.com/TryGhost/Ghost/pull/28352
- github.com/TryGhost/Ghost/security/advisories/GHSA-xm43-3m56-w3wf
- github.com/advisories/GHSA-xm43-3m56-w3wf
- nvd.nist.gov/vuln/detail/CVE-2026-59817
Code Behaviors & Features
Detect and mitigate CVE-2026-59817 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →