Ghostfolio
2 CVEs
product
Monthly
SQL injection in Ghostfolio before 2.244.0 via symbol validation bypass. Patch available.
RCE
SQLi
Ghostfolio
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.1%
SSRF in Ghostfolio wealth management before 2.245.0. Patch available.
SSRF
Ghostfolio
NVD
GitHub
CVSS 3.1
9.3
EPSS
0.0%
CVE-2026-28785
EPSS 0%
CVSS 9.8
CRITICAL
PATCH
Act Now
SQL injection in Ghostfolio before 2.244.0 via symbol validation bypass. Patch available.
RCE
SQLi
Ghostfolio
NVD
GitHub
CVE-2026-28680
EPSS 0%
CVSS 9.3
CRITICAL
PATCH
Act Now
SSRF in Ghostfolio wealth management before 2.245.0. Patch available.
SSRF
Ghostfolio
NVD
GitHub