Vulnerabilities in gohugoio
25 resultsCVE-2026-109597MEDIUMHugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDsEPSS 0.2%CVE-2026-109595MEDIUMHugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild ResolverEPSS 0.1%CVE-2026-109574MEDIUMHugo before v0.167.0 Path Traversal via css.Sass Import FallbackEPSS 0.1%CVE-2026-109596MEDIUMHugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount AncestorEPSS 0.1%CVE-2026-100693HIGHHugo v0.162.0 before v0.166.0 IP-literal Deny Rule BypassEPSS 0.1%