ghost ghost

Name: ghost ghost
Brand: ghost

productUS

cpe:2.3:a:ghost:ghost:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical7high14medium1low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-26980US	high7.5	71.1% (99th)	Exploit	6.19.1	2026-02-20	3.24.0 → 6.19.1
CVE-2023-40028US	medium6.5	69.0% (99th)	Exploit	5.59.1	2023-08-15	< 5.59.1
CVE-2023-32235US	high7.5	39.1% (99th)	Exploit	5.42.1	2023-05-05	< 5.42.1
CVE-2026-29053US	critical9.8	4.83% (92nd)	Exploit	6.19.1	2026-03-05	0.7.2 → 6.19.1
CVE-2024-23724US	critical9.0	3.48% (89th)	Exploit	no fix	2024-02-11	≤ 5.76.0
CVE-2026-22594US	—	1.31% (71st)	Exploit	6.11.0	2026-01-10	2 versions
CVE-2023-31133US	high7.5	45.7% (99th)	—	5.46.1	2023-05-08	< 5.46.1
CVE-2022-41697US	medium5.3	20.0% (97th)	—	no fix	2022-12-22	= 5.9.4
CVE-2022-41654US	medium4.3	18.9% (97th)	—	4.48.8	2022-12-22	2 versions
CVE-2021-29484US	medium4.3	7.94% (95th)	—	4.3.3	2021-04-29	4.0.0 → 4.3.3
CVE-2022-27139US	critical9.8	4.04% (91st)	—	no fix	2022-04-12	= 4.39.0
CVE-2022-28397US	critical9.8	3.50% (89th)	—	no fix	2022-04-12	= 4.42.0
CVE-2016-10983US	medium6.5	1.52% (74th)	—	0.5.6	2019-09-17	< 0.5.6
CVE-2020-8134US	high8.1	1.22% (69th)	—	3.10.0	2020-03-20	< 3.10.0
CVE-2022-47197US	medium5.4	1.02% (63rd)	—	no fix	2023-01-19	= 5.9.4
CVE-2021-39192US	high7.2	1.02% (63rd)	—	4.10.0	2021-09-03	4.0.0 → 4.10.0
CVE-2022-47194US	medium5.4OT elevated	0.82% (57th)	—	no fix	2023-01-19	= 5.9.4
CVE-2024-34451US	—	0.77% (55th)	—	no fix	2024-06-16	≤ 5.85.1
CVE-2024-34448US	—	0.73% (54th)	—	5.82.0	2024-05-22	< 5.82.0
CVE-2022-47196US	medium5.4OT elevated	0.68% (52nd)	—	no fix	2023-01-19	= 5.9.4
CVE-2022-47195US	medium5.4	0.68% (52nd)	—	no fix	2023-01-19	= 5.9.4
CVE-2023-26510US	medium5.7OT elevated	0.63% (50th)	—	no fix	2023-03-05	= 5.35.0
CVE-2026-22595US	—OT elevated	0.54% (45th)	—	6.11.0	2026-01-10	2 versions
CVE-2025-9862US	medium6.5	0.52% (44th)	—	no fix	2025-09-17	2 versions
CVE-2026-22596US	high7.2	0.47% (40th)	—	5.130.6	2026-01-10	2 versions
CVE-2024-23725US	medium6.1	0.44% (38th)	—	5.76.0	2024-01-21	< 5.76.0
CVE-2024-43409US	medium6.5	0.32% (25th)	—	5.89.5	2024-08-20	4.46.0 → 5.89.5
CVE-2026-22597US	low2.7	0.30% (22nd)	—	5.130.6	2026-01-10	2 versions
CVE-2026-24778US	medium6.1	0.29% (21st)	—	6.15.0	2026-01-27	2 versions
CVE-2026-29784US	high8.8	0.17% (6th)	—	6.19.3	2026-03-07	5.101.6 → 6.19.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-453Insecure Default Variable Initialization4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan