搜索结果
关于「hugo」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-100693 | Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypass(CVE-2026-100693) | 2026-09-26 | ||
| AVD-2026-100694 | Hugo before 0.166.0 Cross-Site Scripting via text/org(CVE-2026-100694) | 2026-09-26 | ||
| AVD-2026-100690 | Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks(CVE-2026-100690) | 2026-09-26 | ||
| AVD-2026-100691 | Hugo before 0.166.0 Stored XSS via lineAnchors code block option(CVE-2026-100691) | 2026-09-26 | ||
| AVD-2026-100692 | Hugo before v0.166.0 Path Traversal via Symlinked Mount Roots(CVE-2026-100692) | 2026-09-26 | ||
| AVD-2026-10618 | Hugo代码块属性XSS(CVE-2026-10618) | 2026-08-24 | ||
| AVD-2026-75926 | Hugo 0.162.0 至 0.164.x - 通过默认 TailwindCSS 子进程授予绕过节点权限模型 (CVE-2026-75926) | 2026-08-19 | ||
| AVD-2026-50135 | Hugo：resources.Get 中的符号链接限制绕过 (CVE-2026-50135) | 2026-07-07 | ||
| AVD-2026-58404 | Hugo security.http.urls 拒绝备用 IPv4 编码绕过的规则 (CVE-2026-58404) | 2026-07-07 | ||
| AVD-2026-58403 | os.ReadFile 中的 Hugo 符号链接限制绕过 (CVE-2026-58403) | 2026-07-07 | ||
| AVD-2026-58402 | Hugo 默认代码块渲染器通过未转义的代码栅栏语言实现 XSS (CVE-2026-58402) | 2026-07-07 | ||
| AVD-2026-50133 | Hugo：通过文本/html 内容文件进行 XSS (CVE-2026-50133) | 2026-07-07 | ||
| AVD-2026-50134 | Hugo：通过 HTTP 重定向绕过 security.http.urls 允许列表 (CVE-2026-50134) | 2026-07-07 | ||
| AVD-2026-44301 | Hugo Node工具文件系统访问未授权漏洞(CVE-2026-44301) | 2026-05-13 | ||
| AVD-2026-35166 | Hugo < 0.159.2 Markdown渲染XSS漏洞(CVE-2026-35166) | 2026-04-07 | ||
| AVD-2024-55601 | Hugo 未转义内部模板中的某些属性（CVE-2024-55601） | 2024-12-10 | ||
| AVD-2024-32875 | Hugo 不会在内部渲染挂钩中转义 Markdown 标题 (CVE-2024-32875) | 2024-04-24 | ||
| AVD-2020-26284 | Gohugoio Hugo操作系统命令注入漏洞 | 2020-12-22 |