duke42
Security scan & fix
Ongoing care
GHOST REPAIR & SECURITY
We check your self-hosted Ghost installation and its dependencies, update it and test publishing and member access.
See recent security issues ↓Previously €199 Now €99 / one-time repair
Ghost and runtime inventory · Backup · Update · Publishing, uploads and member checks
Money-back guarantee. If we can’t fix your problem, we’ll refund your payment in full. Prices in EUR; VAT added where applicable.
FREE WEBSITE CHECK
24 Jul 2026 – 24 Oct 2026 · Sources checked 24 Oct 2026
Selected upstream Ghost advisories for self-hosted installations. Ghost is a Node.js application, not a PHP CMS. This is a selected list, not a complete vulnerability inventory or a scan of your system.
CVE-2026-105642
A staff user can trigger vulnerable image processing through a bookmark card.
CVE-2026-105643
Staff-authored embed cards can compromise another editor’s session.
CVE-2026-84383
Crafted images uploaded by staff can crash the process and may enable code execution.
CVE-2026-105647
Unauthenticated requests can reach limited internal HTTP endpoints without returning response data.
CVE-2026-105679
Staff uploads may run scripts on the publication’s domain.
Send the site or server address and a working contact. We’ll check the installed versions and configuration before making changes. Missing access? Tell us what you have.
Keep it maintained afterwards. Care from €29/month ↗