Hugo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 6, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Hugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDs
Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor
Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback
Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolver
Hugo before 0.166.0 Cross-Site Scripting via text/org
Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypass
Hugo before 0.166.0 Stored XSS via lineAnchors code block option
Hugo before v0.166.0 Path Traversal via Symlinked Mount Roots
Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks
Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS
Monitor Hugo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.