Vulnerabilities in ghostfolio

2 results

CVE-2026-28785CRITICALGhostfolio: Time-Based Blind SQL Injection in Manual Asset ImportEPSS 0.4%CVE-2026-28680CRITICALGhostfolio: Full-Read SSRF in Manual Asset ImportEPSS 0.2%