Vulnerabilities in Ghostfolio

5 results

CVE-2026-59708HIGHGhostfolio - Unauthorized Portfolio Data Exposure via Public EndpointEPSS 0.6%CVE-2026-28785CRITICALGhostfolio: Time-Based Blind SQL Injection in Manual Asset ImportEPSS 0.4%CVE-2026-47127MEDIUMGhostfolio has a Stripe subscription bypassEPSS 0.3%CVE-2026-59709MEDIUMGhostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission CheckEPSS 0.3%CVE-2026-28680CRITICALGhostfolio: Full-Read SSRF in Manual Asset ImportEPSS 0.3%