Поиск уязвимостей
Количество 7
Количество 7
GHSA-xpjr-56xg-vx6v
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost.
CVE-2026-100693
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost.
CVE-2026-100693
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost.
CVE-2026-100693
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost.
CVE-2026-100693
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive v ...
BDU:2026-16851
Уязвимость генератора статических сайтов Hugo, связанная с недостатками механизма обработки регистрозависимых данных, позволяющая нарушителю обойти существующие механизмы безопасности
ALT-PU-2026-21008
ALT-PU-2026-21008: package `hugo` update to version 0.169.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xpjr-56xg-vx6v Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost. | CVSS3: 8.4 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-100693 Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost. | CVSS3: 8.4 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-100693 Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost. | CVSS3: 4 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-100693 Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. Attackers can use mixed-case URL schemes in resources.GetRemote calls to fetch from restricted IP addresses like localhost. | CVSS3: 8.4 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100693 Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive v ... | CVSS3: 8.4 | 0% Низкий | около 1 месяца назад |
 | BDU:2026-16851 Уязвимость генератора статических сайтов Hugo, связанная с недостатками механизма обработки регистрозависимых данных, позволяющая нарушителю обойти существующие механизмы безопасности | CVSS3: 8.4 | 0% Низкий | 2 месяца назад |
| ALT-PU-2026-21008 ALT-PU-2026-21008: package `hugo` update to version 0.169.0-alt1 | CVSS3: 8.4 | 4 дня назад |
Уязвимостей на страницу