VYPR

Ghost CLI

by Tryghost

CVEs (1)

  • CVE-2026-25552Jul 31, 2026
    risk 0.00cvss epss 0.00

    Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to…