CVE-2026-59817

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-59817
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59817.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-59817
Aliases
Published
2026-07-09T17:40:15.629Z
Modified
2026-07-16T03:31:11.232013525Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Details

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment without exposing customer or member data or stealing money from a site or its members. This issue is fixed in version 6.44.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-472",
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59817.json"
}
References

Affected packages

Git / github.com/tryghost/ghost

Affected ranges

Type
GIT
Repo
https://github.com/tryghost/ghost
Events
Introduced
2daa6eba775c961ca41f2732b622d9deb86a39ee
Fixed
42dd01fb05574217adc8b77bb2bbc85149c332b0
Fixed
cab716cd015ac04b7ee50c7a405478d97bc7b1e0
Fixed
ee7b991b466a7849c70f9d1caed8e491ee4113c6
Database specific 
{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "6.27.0"
        },
        {
            "fixed": "6.44.0"
        }
    ]
}

Affected versions

v6.*
v6.27.0
v6.28.0
v6.29.0
v6.29.1
v6.30.0
v6.31.0
v6.32.0
v6.33.0
v6.34.0
v6.35.0
v6.36.0
v6.37.0
v6.37.1
v6.38.0
v6.39.0
v6.40.0
v6.41.0
v6.41.1
v6.42.0
v6.43.0
v6.43.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59817.json"