github.com/gohugoio/hugo Security Advisories - Go | Ecosyste.ms: Advisories

github.com/gohugoio/hugo

View on github.com · View on proxy.golang.org

Security Advisories for github.com/gohugoio/hugo in go

High

2 months ago

Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF) GSA_kwCzR0hTQS1yNDZmLTNycHctaHhyds4ABZLN

go github.com/gohugoio/hugo

Moderate

2 months ago

Hugo: Symlink confinement bypass in os.ReadFile GSA_kwCzR0hTQS1jM3dxLWo1dmgtNjhyY84ABZKP

go github.com/gohugoio/hugo

Moderate

2 months ago

Hugo: XSS via unescaped code-fence language in default code block renderer GSA_kwCzR0hTQS1xNzZqLWdjZzktdnhjNs4ABZKO

go github.com/gohugoio/hugo

Moderate

2 months ago

Hugo: Symlink confinement bypass in resources.Get GSA_kwCzR0hTQS1mdzg3LWZ2NXItOWZwd84ABY0s

go github.com/gohugoio/hugo

Moderate

2 months ago

Hugo: security.http.urls allow-list bypass via HTTP redirects GSA_kwCzR0hTQS12eGdtLTVybWctNXc4Z84ABY0r

go github.com/gohugoio/hugo

Moderate

2 months ago

Hugo: XSS via text/html content files GSA_kwCzR0hTQS1jNTRnLXhqd2otOGc4Ms4ABY0q

go github.com/gohugoio/hugo

Moderate

3 months ago

Hugo's Node tool execution allows file system access outside the project directory GSA_kwCzR0hTQS14NTk3LTlmcjQtNTg1N84ABWTm

go github.com/gohugoio/hugo

Moderate

5 months ago

Hugo: Certain markdown links are not properly escaped GSA_kwCzR0hTQS1tY3Y4LThtOHgtNDhwZ84ABUt-

go github.com/gohugoio/hugo

Moderate

over 1 year ago

Hugo does not escape some attributes in internal templates GSA_kwCzR0hTQS1jMnhmLTl2MnItcjJyeM4ABCNH

go github.com/gohugoio/hugo

Moderate

over 2 years ago

Hugo Markdown titles do not escaped in internal render hooks GSA_kwCzR0hTQS1wcGY4LWhocHAtZjVoas4AA7QS

go github.com/gohugoio/hugo

High

about 5 years ago

Hugo can execute a binary from the current directory on Windows MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThqMzQtOTg3Ni1wdmZx

go github.com/gohugoio/hugo

Filter by Severity

Moderate 9 High 2