gohugoio Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by gohugoio

JSON RSS CSV 🔔 Create Alert Trigger

26 September 2026

Case-Sensitive Validation Flaw in Hugo by GoHugo
CVE-2026-100693
GohugoioHugo8.6HIGH
Path Traversal Vulnerability in Hugo Static Site Generator
CVE-2026-100692
GohugoioHugo8.7HIGH
Arbitrary File Read Vulnerability in Hugo by GoHugoIO
CVE-2026-100690
GohugoioHugo8.7HIGH

11 September 2026

Insufficient Permissions in Hugo Static Site Generator by GoHugoIO
CVE-2026-89259
GohugoioHugo9.3CRITICAL
Symlink Confinement Bypass in Hugo Static Site Generator
CVE-2026-89258
GohugoioHugo9.3CRITICAL

24 August 2026

Server-Side Request Forgery in Hugo's HTTP Allowlist Mechanism
CVE-2026-10582
GohugoioHugo8.3HIGH

18 August 2026

Node.js Permission Model Bypass in Hugo by GoHugoIO
CVE-2026-75926
GohugoioHugo9.3CRITICAL

21 December 2020

Hugo can execute a binary from the current directory on Windows
CVE-2020-26284
GohugoioHugo7.7HIGH