https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:49:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-103279 <p><strong>Affected:</strong> TryGhost Ghost</p> <p>Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.</p> <p><strong>Affected:</strong> TryGhost Ghost</p> <p>Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.</p> https://vulnerability.circl.lu/vuln/cve-2026-103279