← ターゲット選定に戻る

CMS

TryGhost/Ghost

Independent technology for modern publishing, memberships, subscriptions and newsletters.

#journalism#publishing#blogging#javascript#web-application#cms#nodejs#ghost

スコア

60

/ 100

Star

52,810

Fork

11,550

Open Issue

70

サイズ

457MB

言語

JavaScript ★

最終push

0 日前

Docker

—

採点内訳

過去CVE 16件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (JavaScript)

✓

オープンissue 70件

—

大規模 (457MB)

—

Docker 未対応

—

50k–100k: 上級 (★52,810)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (18 件)

HIGHGHSA-9m84-wc28-w895 CVE-2026-297842026/3/4
Incomplete CSRF protections around OTC use
HIGHGHSA-cgc2-rcrh-qr5x CVE-2026-290532026/3/2
Remote Code Execution via Malicious Themes
CRITICALGHSA-w52v-v783-gw97 CVE-2026-269802026/2/16
SQL injection in Content API
HIGHGHSA-gv6q-2m97-882h CVE-2026-247782026/1/27
XSS via malicious Portal preview links
MEDIUMGHSA-gjrp-xgmh-x9qq CVE-2026-225962026/1/8
SQL Injection in Members Activity Feed
MEDIUMGHSA-vmc4-9828-r48r CVE-2026-225972026/1/8
SSRF via External Media Inliner
HIGHGHSA-9xg7-mwmp-xmjx CVE-2026-225952026/1/8
Staff Token permission bypass
HIGHGHSA-5fp7-g646-ccf4 CVE-2026-225942026/1/8
Staff 2FA bypass
MEDIUMGHSA-f7qg-xj45-w956 CVE-2025-98622025/9/14
SSRF via oEmbed Bookmark
MEDIUMGHSA-78x2-cwp9-5j42 CVE-2024-434092024/8/20
Improper authentication allows access to member information and actions
MEDIUMGHSA-9c9v-w225-v5rg CVE-2023-400282023/8/15
Arbitrary file read via symlinks in content import
HIGHGHSA-r97q-ghch-82j9 CVE-2023-311332023/5/3
Information disclosure of private API fields
HIGHGHSA-9gh8-wp53-ccc6 CVE-2022-416542022/11/28
Unauthorized Newsletter Modification
MEDIUMGHSA-7v28-g2pq-ggg8 CVE-2022-247852022/6/15
Remote code execution in locale setting change
MEDIUMGHSA-65p7-pjj8-ggmr2021/9/23
Member account takeover
MEDIUMGHSA-wfrj-qqc2-83cm2021/9/17
Remote command injection when using sendmail email transport
MEDIUMGHSA-j5c2-hm46-wp5c CVE-2021-391922021/7/20
Privilege escalation: all users can access Admin-level API keys
HIGHGHSA-9fgx-q25h-jxrg CVE-2021-294842021/4/29
DOM XSS in Theme Preview