Back to Catalog
Ghost logo

Ghost

Independent technology for modern publishing, memberships, subscriptions and newsletters

app

Alternative to: substack, medium, wordpress.com, patreon

Website Repository Docs
About Versions (100)
Back to Versions

v5.130.6

2026-01-08
  • 🔒 Fixed staff token authorization bypass via trailing slash mismatch (#25805) - Michael Barrett
  • 🔒 Fixed potential SSRF via media inliner (#25807) - Michael Barrett
  • 🔒 Fixed SQL injection vulnerability in click event query (#25804) - Michael Barrett
  • 🔒 Fixed ability to bypass Staff User 2FA flow (#25806) - Michael Barrett

View the changelog for full details: https://github.com/tryghost/ghost/compare/v5.130.5
v5.130.6

Changelog on GitHub →