gohugo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 21, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Hugo before 0.166.0 Cross-Site Scripting via text/org
Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypass
Hugo before 0.166.0 Stored XSS via lineAnchors code block option
Hugo before v0.166.0 Path Traversal via Symlinked Mount Roots
Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks
Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values
Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant
Hugo symlink confinement bypass in os.ReadFile
Hugo default code block renderer XSS via unescaped code-fence language
Hugo security.http.urls deny rules bypassed by alternate IPv4 encodings
Monitor gohugo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.