ghostfolio vulnerabilities
5 published CVEs name ghostfolio among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47127
Ghostfolio has a Stripe subscription bypass
ghostfolio · ghostfolio
Medium6.5 - CVE-2026-59708
Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint
ghostfolio · ghostfolio
High8.7 - CVE-2026-59709
Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check
Ghostfolio · Ghostfolio
Medium5.3 - CVE-2026-28785
Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import
ghostfolio · ghostfolio
Critical9.3 - CVE-2026-28680
Ghostfolio: Full-Read SSRF in Manual Asset Import
ghostfolio · ghostfolio
Critical9.3