gohugoio Hugo Vulnerabilities

Gohugoio Hugo vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

6 July 2026

Symlink Handling Vulnerability in Hugo Static Site Generator by GoHugoIO
CVE-2026-50135
GohugoioHugo6.9MEDIUM
HTTP Redirection Vulnerability in Hugo Static Site Generator
CVE-2026-50134
GohugoioHugo6.3MEDIUM
Stored Cross-Site Scripting Vulnerability in Hugo Static Site Generator
CVE-2026-50133
GohugoioHugo5.1MEDIUM
Symlink Vulnerability in Hugo Static Site Generator from GoHugoIO
CVE-2026-58403
GohugoioHugo5.9MEDIUM
Unescaped Code-block Renderer in Hugo Affects Static Site Generation
CVE-2026-58402
GohugoioHugo5.1MEDIUM
Loopback Request Vulnerability in Hugo Static Site Generator
CVE-2026-58404
GohugoioHugo4.6MEDIUM

12 May 2026

File System Access Vulnerability in Hugo Static Site Generator
CVE-2026-44301
GohugoioHugo6.2MEDIUM

6 April 2026

Markdown Rendering Vulnerability in Hugo Static Site Generator
CVE-2026-35166
GohugoioHugo5.3MEDIUM

23 April 2024

Hugo Fixes Security Vulnerability in Markdown Rendering
CVE-2024-32875
GohugoioHugo6.1MEDIUM

21 December 2020

Hugo can execute a binary from the current directory on Windows
CVE-2020-26284
GohugoioHugo7.7HIGH