715 matches found
GHSA-MCV8-8M8X-48PG Hugo: Certain markdown links are not properly escaped
Impact Links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affected. Patches Patched in v0.159.2 Workarounds Create custom render hooks for links and images in...
Hugo: Certain markdown links are not properly escaped
Impact Links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affected. Patches Patched in v0.159.2 Workarounds Create custom render hooks for links and images in...
PT-2026-30283
Name of the Vulnerable Software and Affected Versions Hugo versions 0.60.0 through 0.159.1 Description Hugo, a static site generator, has an issue where links and image links in the default markdown to HTML renderer are not properly escaped. Users who trust their Markdown content or have custom...
CVE-2026-33809 vulnerabilities
Vulnerabilities for packages: hugo, rclone-fips, seaweedfs-operator-fips, seaweedfs-operator, rclone, hugo-extended, ollama-fips, mattermost-fips, mailpit-fips, mattermost, ollama, seaweedfs-fips, mailpit, listmonk, seaweedfs, hugo-fips...
GHSA-44P7-9XX4-HF2G vulnerabilities
Vulnerabilities for packages: hugo, rclone-fips, seaweedfs-operator-fips, seaweedfs-operator, rclone, hugo-extended, ollama-fips, mattermost-fips, mailpit-fips, mattermost, ollama, seaweedfs-fips, mailpit, listmonk, seaweedfs, hugo-fips...
GHSA-44P7-9XX4-HF2G vulnerabilities
Vulnerabilities for packages: mailpit, seaweedfs, hugo, rclone, ollama, mattermost, hugo-extended...
CVE-2026-33809 vulnerabilities
Vulnerabilities for packages: mailpit, seaweedfs, hugo, rclone, ollama, mattermost, hugo-extended...
EUVD-2025-178500
Malicious code in hugo-build-configstore-rollup-plugin npm...
EUVD-2025-177701
Malicious code in native-izar-hugo-start npm...
EUVD-2025-176741
Malicious code in regulus-node-sass-hugo-mensa npm...
EUVD-2025-179288
Malicious code in docusaurus-hugo-uglify-js-dione npm...
EUVD-2025-178495
Malicious code in hugo-plutology-comet-cluster npm...
EUVD-2025-178497
Malicious code in hugo-miranda-prettier-stylelint-xenon npm...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
EUVD-2025-180087
Malicious code in betelgeuse-nodejs-hugo-flare npm...
Malicious code in hugo-nashira-boson-passport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180056
Malicious code in biomimicry-kuiperbelt-castor-hugo npm...
EUVD-2025-179172
Malicious code in elektra-xml-grus-hugo npm...