# GHSA-w52v-v783-gw97: Ghost has a SQL injection in Content API

**Severity:** CRITICAL | **CVSS:** 9.4 | **Source:** ghsa

## Description

### Impact

A SQL injection vulnerability existed in Ghost's Content API that allowed unauthenticated attackers to read arbitrary data from the database. 

### Vulnerable Versions

This vulnerability is present in Ghost v3.24.0 to v6.19.0.

### Patches

v6.19.1 contains a fix for this issue.

### Workarounds

There is no application-level workaround. The Content API key is public by design, so restricting key access does not mitigate this vulnerability.

As a temporary mitigation, a reverse proxy or WAF rule can be used to block Content API requests containing `slug%3A%5B` or `slug:[` in the query string filter parameter. Note that this may break legitimate slug filter functionality.

### References

We thank Nicholas Carlini using Claude, Anthropic for disclosing this vulnerability responsibly. 

### For more information
If you have any questions or comments about this advisory, email us at [security@ghost.org](mailto:security@ghost.org).

## CVSS

- **Score:** 9.4
- **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L`

## Weakness

- [CWE-89](https://cwe.mitre.org/data/definitions/89.html)

## Affected Packages

### ghost (npm)
- **Vulnerable:** `>= 3.24.0, < 6.19.1`
- **Fixed in:** `6.19.1`

## References

**Commits:**
- https://github.com/TryGhost/Ghost/commit/30868d632b2252b638bc8a4c8ebf73964592ed91

**Advisories:**
- https://github.com/TryGhost/Ghost/security/advisories/GHSA-w52v-v783-gw97
- https://github.com/advisories/GHSA-w52v-v783-gw97

**Other:**
- https://github.com/TryGhost/Ghost/releases/tag/v6.19.1

## Related Identifiers

- CVE-2026-26980

---

**Source:** https://github.com/advisories/GHSA-w52v-v783-gw97
**Published:** 2026-02-18
**Ingested:** 2026-02-19 18:39:55 UTC

## Reproduction Steps

_To be determined by the reproduction agent._