{"api_version":"v1","generated_at":"2026-10-07T02:40:00+00:00","product":{"cve_count":1,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-ghost-ghost-25bf518d2c6f","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/ghost","name":"Ghost","next_cursor":null,"observations":[{"affected":"6.0.0 \u2264 6.0.8; 5.99.0 \u2264 5.130.3","affected_versions_present":true,"cve_id":"CVE-2025-9862","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-9862","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-17T15:42:32.020Z","patch_url":"https://github.com/TryGhost/Ghost/releases/tag/v6.0.9","primary_source":"","published":"2025-09-17T15:02:01.533Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"Ghost"}}