Exposure of Hugo

Static site generator

25

exposure score

6,440

sites use

0

exploited

0

critical

CVEs

11 results

CVE-2020-26284HIGHHugo can execute a binary from the current directory on WindowsEPSS 1.5%CVE-2024-55601MEDIUMHugo does not escape some attributes in internal templatesEPSS 0.6%CVE-2024-32875MEDIUMHugo doesn't escape markdown title in internal render hooksEPSS 0.5%CVE-2026-58403MEDIUMHugo symlink confinement bypass in os.ReadFileEPSS 0.3%CVE-2026-44301MEDIUMHugo: Node tool execution allows file system access outside the project directoryEPSS 0.3%CVE-2026-50135MEDIUMHugo: Symlink confinement bypass in resources.GetEPSS 0.3%CVE-2026-50134MEDIUMHugo: security.http.urls allow-list bypass via HTTP redirectsEPSS 0.2%CVE-2026-58404MEDIUMHugo security.http.urls deny rules bypassed by alternate IPv4 encodingsEPSS 0.2%CVE-2026-35166MEDIUMHugo does not properly escape some Markdown linksEPSS 0.2%CVE-2026-50133MEDIUMHugo: XSS via text/html content filesEPSS 0.2%CVE-2026-58402MEDIUMHugo default code block renderer XSS via unescaped code-fence languageEPSS 0.2%