hugo vulnerabilities (Ubuntu)
24 vulnerabilities.
-
hugoUbuntu Hugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDs 5.1 Medium -
hugoUbuntu Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor 6.7 Medium -
hugoUbuntu Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolver 6.7 Medium -
hugoUbuntu Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback 6.7 Medium -
hugoUbuntu Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS 9.3 Critical -
hugoUbuntu Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get 9.3 Critical -
hugoUbuntu Hugo before 0.166.0 Cross-Site Scripting via text/org 5.1 Medium -
hugoUbuntu Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypass 8.6 High -
hugoUbuntu Hugo before v0.166.0 Path Traversal via Symlinked Mount Roots 8.7 High -
hugoUbuntu Hugo before 0.166.0 Stored XSS via lineAnchors code block option 5.1 Medium -
hugoUbuntu Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks 8.7 High -
hugoUbuntu Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values 4.8 Medium -
hugoUbuntu Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation 8.3 High -
hugoUbuntu Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant 9.3 Critical -
hugoUbuntu Hugo security.http.urls deny rules bypassed by alternate IPv4 encodings 4.6 Medium -
hugoUbuntu Hugo symlink confinement bypass in os.ReadFile 5.9 Medium -
hugoUbuntu Hugo default code block renderer XSS via unescaped code-fence language 5.1 Medium -
hugoUbuntu Hugo: Symlink confinement bypass in resources.Get 6.9 Medium -
hugoUbuntu Hugo: security.http.urls allow-list bypass via HTTP redirects 6.3 Medium -
hugoUbuntu Hugo: XSS via text/html content files 5.1 Medium -
hugoUbuntu Hugo: Node tool execution allows file system access outside the project directory 6.2 Medium -
hugoUbuntu Hugo does not properly escape some Markdown links 5.3 Medium -
hugoUbuntu Hugo does not escape some attributes in internal templates 5.3 Medium -
hugoUbuntu Hugo doesn't escape markdown title in internal render hooks 6.1 Medium