PT-2026-124410

TuxCare rebuilt @esbuild/linux-riscv64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124404

TuxCare rebuilt @esbuild/linux-mips64el to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124470

TuxCare rebuilt @esbuild/openbsd-x64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124493

TuxCare rebuilt @esbuild/linux-s390x to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124106

TuxCare rebuilt @esbuild/android-arm to address 1 CVE. Fixed in 0.15.18-tuxcare.1...

PT-2026-124219

TuxCare rebuilt @esbuild/freebsd-arm64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124208

TuxCare rebuilt @esbuild/darwin-x64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124204

TuxCare rebuilt @esbuild/darwin-arm64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124189

TuxCare rebuilt @esbuild/android-arm64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124300

TuxCare rebuilt @esbuild/linux-arm to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124282

TuxCare rebuilt @esbuild/freebsd-x64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124105

TuxCare rebuilt @esbuild/android-arm to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-124514

TuxCare rebuilt @esbuild/linux-x64 to address 1 CVE. Fixed in 0.18.20-tuxcare.1...

PT-2026-123617

TuxCare rebuilt esbuild to address 1 CVE. Fixed in 0.19.11-tuxcare.1...

EUVD-2026-98158

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

DEBIAN-CVE-2026-109595

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

CVE-2026-109595

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

CVE-2026-109595

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

UBUNTU-CVE-2026-109595

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

CVE-2026-109595 Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolver

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...