Medium, CVSS 5.3
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
npm ghost · Upgrade to 6.44.0 or later · >= 6.27.0, < 6.44.0 · CVE-2026-59817 · GHSA-xm43-3m56-w3wf
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
1–25 of 57 matching · newest first
- High, CVSS 7.5
XSS in Ghost's ActivityPub client
npm @tryghost/activitypub · Upgrade to 3.1.0 or later · < 3.1.0 · CVE-2026-53950 · GHSA-xpp7-93x6-v29m
- Medium, CVSS 6.7
Ghost: Session Fixation in Ghost Admin
npm ghost · Upgrade to 6.54.1 or later · >= 2.2.0, < 6.54.1 · CVE-2026-70594 · GHSA-7mpp-r37j-x5wh
- Medium, CVSS 6.6
Ghost: Theme Upload Path Traversal
npm ghost · Upgrade to 6.54.1 or later · >= 0.10.0, < 6.54.1 · CVE-2026-70593 · GHSA-cjc9-q5gf-327p
- Medium, CVSS 5.5
Ghost: Database Backup Path Traversal
npm ghost · Upgrade to 6.54.1 or later · >= 1.20.1, < 6.54.1 · CVE-2026-70592 · GHSA-cj62-hvv2-2q5h
- Medium, CVSS 4.1
Ghost: Server-Side Request Forgery in Image Fetching
npm ghost · Upgrade to 6.54.1 or later · >= 0.10.0, < 6.54.1 · CVE-2026-70591 · GHSA-gcvv-72q8-9v76
- Medium, CVSS 4.8
Ghost: Blind Password Hash Disclosure in Ghost Admin API
npm ghost · Upgrade to 6.54.1 or later · < 6.54.1 · CVE-2026-70590 · GHSA-jm22-3w23-5q7w
- Medium, CVSS 5.8
Ghost: Private IP filtering bypass to make server-side requests to internal services
npm ghost · Upgrade to 6.21.1 or later · >= 6.0.9, <= 6.21.0 · CVE-2026-53944 · GHSA-wvp2-4qqp-4h3r
- Medium, CVSS 4.8
Ghost: Archived Offers can be Redeemed
npm ghost · Upgrade to 6.54.1 or later · >= 4.22.0, < 6.54.1 · CVE-2026-70589 · GHSA-4wx2-7gvj-qfq3
- Medium, CVSS 5.4
Ghost: File Upload Content-Type Spoofing
npm ghost · Upgrade to 6.21.1 or later · >= 6.19.4, < 6.21.1 · CVE-2026-53948 · GHSA-944x-pm95-3jpr
- Medium, CVSS 5.0
Ghost: Cross-Site Scripting in Universal Import
npm ghost · Upgrade to 6.54.1 or later · >= 5.26.0, < 6.54.1 · CVE-2026-70588 · GHSA-2gx6-7gx2-wwcf · amended
- High, CVSS 8.1
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.10.0, < 0.11.0 · CVE-2026-70494 · GHSA-3cg5-48j3-v4gv
- Medium, CVSS 6.5
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, < 0.11.0 · CVE-2026-70493 · GHSA-2f54-p244-32q6
- High, CVSS 8.7
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.10.0, < 0.11.0 · CVE-2026-70492 · GHSA-pwxh-7358-jq2x
- Medium, CVSS 6.5
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
PyPI open-webui · Upgrade to 0.11.0 or later · <= 0.10.2 · CVE-2026-70491 · GHSA-3r7g-q6cg-q2vx
- Medium, CVSS 6.3
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.8.8, < 0.11.0 · CVE-2026-70490 · GHSA-5gpj-vj23-vhhv
- Medium, CVSS 6.5
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, < 0.11.0 · CVE-2026-70489 · GHSA-73cq-mcgh-379c
- Medium, CVSS 6.3
Open WebUI: DNS Rebinding SSRF Bypass
PyPI open-webui · Upgrade to 0.11.0 or later · <= 0.10.2 · CVE-2026-54020 · GHSA-h6x2-583h-x99r
- Medium, CVSS 5.3
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.8.8, <= 0.10.2 · CVE-2026-70487 · GHSA-6xhv-rxhv-pwm4
- Medium, CVSS 4.3
Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, <= 0.10.2 · CVE-2026-70488 · GHSA-jxc9-xmc4-gr23
- High, CVSS 8.2
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, <= 0.10.2 · CVE-2026-70486 · GHSA-3xpf-xq7r-v8c5
- High, CVSS 7.1
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.0, < 0.11.0 · CVE-2026-70485 · GHSA-8x5v-cpv7-8jjp
- Medium, CVSS 4.3
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.7.0, < 0.11.0 · CVE-2026-70484 · GHSA-g423-grf7-98rv
- Medium, CVSS 4.1
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.6.34, < 0.11.0 · CVE-2026-70480 · GHSA-rffm-9q57-q649
- Low, CVSS 3.1
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
PyPI open-webui · Upgrade to 0.11.0 or later · >= 0.9.6, < 0.11.0 · CVE-2026-70483 · GHSA-3vf6-64vr-3g56
A vendor fix does not resolve your finding until you verify it in your own systems.