Ghostfolio Ghostfolio

• CVE-2026-47127 Medium 6.5 Ghostfolio has a Stripe subscription bypass 0.3%
• CVE-2026-59708 High 7.5 Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint 0.6%
• CVE-2026-59709 Medium 4.3 Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check 0.3%
• CVE-2026-28785 Critical 9.3 Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import 0.4%
• CVE-2026-28680 Critical 9.3 Ghostfolio: Full-Read SSRF in Manual Asset Import 0.3%