Security
فارسی
All products

github.com/gohugoio/hugo

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hugo Markdown titles do not escaped in internal render hooksCVE-2024-32875 · GHSA-PPF8-HHPP-F5HJVersion ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo can execute a binary from the current directory on WindowsCVE-2020-26284 · GHSA-8J34-9876-PVFQ github.com/gohugoio/hugo Go High Fix reported
Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF)CVE-2026-58404 · GHSA-R46F-3RPW-HXRVVersion ranges need review. github.com/gohugoio/hugo Go High Fix reported
Hugo: Symlink confinement bypass in os.ReadFileCVE-2026-58403 · GHSA-C3WQ-J5VH-68RCVersion ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo: XSS via unescaped code-fence language in default code block rendererCVE-2026-58402 · GHSA-Q76J-GCG9-VXC6Version ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo's Node tool execution allows file system access outside the project directoryCVE-2026-44301 · GHSA-X597-9FR4-5857Version ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo: Certain markdown links are not properly escapedCVE-2026-35166 · GHSA-MCV8-8M8X-48PGVersion ranges need review. github.com/gohugoio/hugoRed Hat Build of Kueue/kueue/kueue-must-gather-rhel9 GoRed Hat Medium Fix reported
Hugo: security.http.urls allow-list bypass via HTTP redirectsCVE-2026-50134 · GHSA-VXGM-5RMG-5W8GVersion ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo: XSS via text/html content filesCVE-2026-50133 · GHSA-C54G-XJWJ-8G82Version ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo: Symlink confinement bypass in resources.GetCVE-2026-50135 · GHSA-FW87-FV5R-9FPWVersion ranges need review. github.com/gohugoio/hugo Go Medium Fix reported
Hugo does not escape some attributes in internal templatesCVE-2024-55601 · GHSA-C2XF-9V2R-R2RXVersion ranges need review. github.com/gohugoio/hugoRed Hat OpenShift AI (RHOAI)/rhoai/odh-kueue-controller-rhel8 GoRed Hat Medium Fix reported