GO-2024-2937 vulnerabilities

Vulnerabilities for packages: ollama, hugo, hugo-extended...

GO-2026-5066 vulnerabilities

Vulnerabilities for packages: mattermost, seaweedfs, hugo, rclone...

GO-2024-2747 vulnerabilities

Vulnerabilities for packages: hugo-extended...

GO-2026-4815 vulnerabilities

Vulnerabilities for packages: rclone, mattermost, seaweedfs, hugo, hugo-extended, ollama, mailpit...

GO-2026-5062 vulnerabilities

Vulnerabilities for packages: rclone, mattermost, seaweedfs, hugo, filebrowser, hugo-extended, mailpit...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: bank-vaults, timestamp-authority, thanos, tekton-chains, grafana-mimir, sops, druid, cortex, secrets-store-csi-driver-provider-azure, kubescape, flyte, fulcio, chezmoi, rook, policy-controller, flux-kustomize-controller, cosign, boring-registry, buildkitd,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hugo: hugo-0.165.0-0.1.hum1 aarch64, x8664 hugo-0.165.0-0.1.hum1.src src Security Fixes: hugo: CVE-2026-56852...

CVE-2026-51785

An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2026-51785

An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...

EUVD-2026-51645

An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...

PT-2026-66858

Name of the Vulnerable Software and Affected Versions Hugo Leisink Hiawatha versions prior to 12.2 Description A flaw allows a remote attacker to execute arbitrary code by sending a specially crafted request to the server. Recommendations Update Hugo Leisink Hiawatha to version 12.2 or later...

CVE-2026-58402

A flaw was found in Hugo, a static site generator. The default code-block renderer failed to properly escape Markdown code-fence language or info-strings. This vulnerability allows an attacker to inject malicious script elements into web pages, leading to Cross-site Scripting XSS. Successful...

CVE-2026-58404

A flaw was found in Hugo, a static site generator. The default security policy intended to deny requests to loopback, internal, and cloud-metadata IPv4 addresses could be bypassed. This occurred because the deny rule only matched dotted-decimal notation, allowing alternate IPv4 encodings integer,...

CVE-2026-50135

A flaw was found in Hugo, a static site generator. A regression in the resources.Get function caused it to follow symbolic links symlinks, which are special files that point to other files or directories. This vulnerability allows an attacker who can place a symlink within a local mount point, su...

CVE-2026-50133

A flaw was found in Hugo, a static site generator. This vulnerability allows a remote attacker to perform stored cross-site scripting XSS by ingesting untrusted HTML content files. When a site processes these malicious files, the embedded script is executed verbatim in the rendered page,...

CVE-2026-50134

A flaw was found in Hugo, a static site generator. This vulnerability allows an attacker, by controlling a server or its DNS, to redirect HTTP requests to a forbidden host. This bypasses the intended security policy, potentially leading to unauthorized access to resources or information disclosur...

CVE-2026-58403

A flaw was found in Hugo, a static site generator. A regression in its virtual filesystem allowed a symlink symbolic link planted within a theme or local mount to bypass security restrictions. This could enable an attacker to read arbitrary files on the system where Hugo is running, leading to...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-redshift, crossplane-provider-aws-wafregional-fips, crossplane-provider-aws-neptune, crossplane-provider-aws-opensearchserverless-fips, crossplane-provider-aws-rds-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-swf-fips,...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-redshift, crossplane-provider-aws-wafregional-fips, crossplane-provider-aws-neptune, crossplane-provider-aws-opensearchserverless-fips, crossplane-provider-aws-rds-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-swf-fips,...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-sqs, crossplane-provider-azure-storage, crossplane-provider-aws-kms, crossplane-provider-keycloak, crossplane-provider-family-azure, crossplane-provider-aws-rds, hugo-extended, crossplane-provider-aws-iam,...