CVE-2024-55601 Hugo does not escape some attributes in internal templates

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

CVE-2024-55601

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

CVE-2024-55601

Hugo, a static site generator, is affected in versions 0.123.0 through 0.139.3 (prior to 0.139.4). The issue: certain HTML attributes in Markdown in internal templates are not escaped in render hooks, specifically in templates _default/_markup/render-link.html (v0.123.0), _default/_markup/render-...

CVE-2024-55601

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

CVE-2024-55601 Hugo does not escape some attributes in internal templates

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

CVE-2024-55601 Hugo does not escape some attributes in internal templates

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...

GHSA-C2XF-9V2R-R2RX Hugo does not escape some attributes in internal templates

Impact Some HTML attributes in Markdown in the internal templates listed below not escaped. Impacted are Hugo users who do not trust their Markdown content files and are using one or more of these templates. default/markup/render-link.html from v0.123.0 default/markup/render-image.html from...

Hugo does not escape some attributes in internal templates

Impact Some HTML attributes in Markdown in the internal templates listed below not escaped. Impacted are Hugo users who do not trust their Markdown content files and are using one or more of these templates. default/markup/render-link.html from v0.123.0 default/markup/render-image.html from...

Hugo 跨站脚本漏洞

Hugo is a Go-based framework for rapid static site generation from the Gohugoio community. A cross-site scripting vulnerability exists in Hugo versions prior to 0.123.0 through 0.139.4, which stems from improperly escaping HTML attributes in certain Markdown in internal rendering hooks...

CVE-2024-34155 vulnerabilities

Vulnerabilities for packages: flux-source-controller, distribution-fips, grpc-health-probe, mailpit, victoriametrics-operator-fips, src-fingerprint-fips, direnv, nri-mongodb, sonobuoy, tekton-chains, govulncheck, azcopy, secrets-store-csi-driver-provider-gcp, velero-fips, actions-runner-controlle...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: flux-source-controller, src-fingerprint-fips, direnv, nri-mongodb, sonobuoy, tekton-chains, govulncheck, secrets-store-csi-driver-provider-gcp, actions-runner-controller, git-lfs-fips, eksctl, hubble-fips, fzf, helm, mongo-tools, multus-cni-fips, hubble, caddy,...

CVE-2024-24792 vulnerabilities

Vulnerabilities for packages: hugo-extended, chainctl, hugo, gotenberg, ollama...

CVE-2024-24792 vulnerabilities

Vulnerabilities for packages: hugo, hugo-extended, ollama...

GHSA-9PHM-FM57-RHG8 vulnerabilities

Vulnerabilities for packages: hugo-extended, chainctl, hugo, gotenberg, ollama...

Malicious code in hugo-cloudflare-docs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2492 Malicious code in hugo-cloudflare-docs (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: hugo, guac, prometheus-operator, ksops, goreleaser, velero, grafana-agent-operator, sqlpad, flux-kustomize-controller, sigstore-scaffolding, opentelemetry-collector, rclone, flux-image-reflector-controller, argo-events, timestamp-authority, tkn, zarf, zot,...

GO-2024-2747 Hugo Markdown titles are not escaped in internal render hooks in github.com/gohugoio/hugo

Hugo Markdown titles are not escaped in internal render hooks in github.com/gohugoio/hugo...

CVE-2024-33686

Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea...

CVE-2024-33686

CVE-2024-33686 is a Missing Authorization vulnerability affecting multiple Extend Themes products (Pathway until 1.0.15; Hugo WP until 1.0.8; Althea WP until 1.0.13; Elevate WP until 1.0.15; Brite until 1.0.11; Colibri WP until 1.0.94; Vertice until 1.0.7). The CVE has a CVSSv3.1 base score of 4....