CVE-2026-103292 | TryGhost up to 6.49.x JSON-LD ghost_head injection

October 1, 2026 Yanac

A vulnerability classified as problematic was found in TryGhost Ghost up to 6.49.x. Affected by this issue is the function ghost_head of the component JSON-LD. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-103292. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More