Ghostfolio

2 CVEs product

Monthly

CVE-2026-28785 CRITICAL PATCH Act Now

SQL injection in Ghostfolio before 2.244.0 via symbol validation bypass. Patch available.

RCE SQLi Ghostfolio
NVD GitHub
CVSS 3.1
9.8
EPSS
0.1%
CVE-2026-28680 CRITICAL PATCH Act Now

SSRF in Ghostfolio wealth management before 2.245.0. Patch available.

SSRF Ghostfolio
NVD GitHub
CVSS 3.1
9.3
EPSS
0.0%
CVE-2026-28785
EPSS 0% CVSS 9.8
CRITICAL PATCH Act Now

SQL injection in Ghostfolio before 2.244.0 via symbol validation bypass. Patch available.

RCE SQLi Ghostfolio
NVD GitHub
CVE-2026-28680
EPSS 0% CVSS 9.3
CRITICAL PATCH Act Now

SSRF in Ghostfolio wealth management before 2.245.0. Patch available.

SSRF Ghostfolio
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy