Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.9% on npmjs.org
Top 1.0% downloads on npmjs.org
Top 2.5% dependent packages on npmjs.org
Top 0.8% dependent repos on npmjs.org
Top 0.4% forks on npmjs.org
Top 0.1% docker downloads on npmjs.org

npmjs.org : ghost

The professional publishing platform

Registry - Source - Homepage - JSON
purl: pkg:npm/ghost
Keywords: ghost, blog, cms, headless, content, markdown, blogging, creator-economy, hacktoberfest, headless-cms, jamstack, javascript, journalism, nodejs, publishing, web-application
License: MIT
Latest release: 1 day ago
First release: about 10 years ago
Dependent packages: 8
Dependent repositories: 468
Downloads: 45,297 last month
Stars: 45,609 on GitHub
Forks: 9,940 on GitHub
Docker dependents: 52
Docker downloads: 481,277,512
Total Commits: 34401
Committers: 715
Average commits per author: 48.113
Development Distribution Score (DDS): 0.887
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sponsors/tryghost, https://opencollective.com/ghost, https://github.com/sponsors/TryGhost
Last synced: 1 day ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE0aDgtN3FmZi1naDZj

Server-side request forgery in Ghost CMS
Ecosystems: npm
Packages: ghost
Source: github
Published: almost 3 years ago

Critical

GSA_kwCzR0hTQS1mZmhxLWc4NTYtOWYycM06-g

Arbitrary file upload in Ghost
Ecosystems: npm
Packages: ghost
Source: github
Published: about 2 years ago

Critical

GSA_kwCzR0hTQS1mdmM2LXFqcDctbTRnNM06yw

Arbitrary file upload in Ghost
Ecosystems: npm
Packages: ghost
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS1maDM4LTlmZ3ItNDU0d84AA4mG

Cross-site Scripting in Ghost
Ecosystems: npm
Packages: ghost
Source: github
Published: 3 months ago

Moderate

GSA_kwCzR0hTQS02NXA3LXBqajgtZ2dtcs0V-w

Member account takeover
Ecosystems: npm
Packages: ghost
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo1YzItaG00Ni13cDVj

Privilege escalation: all users can access Admin-level API keys
Ecosystems: npm
Packages: ghost
Source: github
Published: almost 3 years ago

High

GSA_kwCzR0hTQS13Zjd4LWZoNnctMzRyNs4AAzGS

Path Traversal in Ghost
Ecosystems: npm
Packages: ghost
Source: github
Published: almost 1 year ago

Moderate

GSA_kwCzR0hTQS05OXZjLXh3OGotcGhqbc4AA5M7

Ghost has possible Cross-site Scripting issue
Ecosystems: npm
Packages: ghost
Source: github
Published: 3 months ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmZ3gtcTI1aC1qeHJn

DOM XSS in Theme Preview
Ecosystems: npm
Packages: ghost
Source: github
Published: about 3 years ago

High

GSA_kwCzR0hTQS05Z2g4LXdwNTMtY2NjNs4AAwEB

ghost vulnerable to unauthorized newsletter modification via improper access controls
Ecosystems: npm
Packages: ghost
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS1yOTdxLWdoY2gtODJqOc4AAzEw

Ghost vulnerable to information disclosure of private API fields
Ecosystems: npm
Packages: ghost
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS05Yzl2LXcyMjUtdjVyZ84AA1Uk

Ghost vulnerable to arbitrary file read via symlinks in content import
Ecosystems: npm
Packages: ghost
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS13ZnJqLXFxYzItODNjbc0V0g

Remote command injection when using sendmail email transport
Ecosystems: npm
Packages: ghost
Source: github
Published: over 2 years ago

Moderate

GSA_kwCzR0hTQS03djI4LWcycHEtZ2dnOM4AArtH

Ghost vulnerable to remote code execution in locale setting change
Ecosystems: npm
Packages: ghost
Source: github
Published: almost 2 years ago