Read the docs

TryGhost

Records110All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high39CVSS 7.0–8.9

Exploited now

TryGhost records in CISA KEV

No TryGhost vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Sqlite3 · all components

TI-2022-21236 CVE-2022-43441 · GHSA-jqv5-7xpx-qj74

Mass assignment in TryGhost node-sqlite3

Priority MEDIUM 47

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02356 Published 2023-03-16 Fixed in 5.1.5 CWE-915
TI-2022-05619 CVE-2022-21227 · GHSA-9qrh-qjmc-5w2p

Denial of service (DoS) in sqlite3

Priority LOW 37

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02213 Published 2022-05-01 Fixed in 5.0.3 CWE-248
Open these records in search →