https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:40:54.325272+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-103284 fkie_cve-2026-103284 2026-10-03T20:40:54.452976+00:00

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.

 https://vulnerability.circl.lu/vuln/ghsa-wm9p-jg8j-w38q GHSA-wm9p-jg8j-w38q 2026-10-03T20:40:54.453068+00:00

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.