Количество 2
Количество 2
CVE-2026-53950
около 2 месяцев назад
@tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously customised ActivityPub server. This vulnerability is fixed in 3.1.0.
CVSS3: 7.5
EPSS: Низкий
GHSA-xpp7-93x6-v29m
7 дней назад
XSS in Ghost's ActivityPub client
CVSS3: 7.5
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53950 @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously customised ActivityPub server. This vulnerability is fixed in 3.1.0. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| GHSA-xpp7-93x6-v29m XSS in Ghost's ActivityPub client | CVSS3: 7.5 | 0% Низкий | 7 дней назад |
Уязвимостей на страницу
20