<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 16:09:26 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-103289 — Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-103289</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TryGhost Ghost&lt;/p&gt;
&lt;p&gt;Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TryGhost Ghost&lt;/p&gt;
&lt;p&gt;Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-103289</guid>
    </item>
  </channel>
</rss>
