Поиск уязвимостей
Количество 6
Количество 6
CVE-2026-50133
Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0.
CVE-2026-50133
Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0.
CVE-2026-50133
Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0.
CVE-2026-50133
Hugo is a static site generator. Prior to 0.162.0, Hugo accepts conten ...
GHSA-c54g-xjwj-8g82
Hugo: XSS via text/html content files
ALT-PU-2026-8450
ALT-PU-2026-8450: package `hugo` update to version 0.162.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-50133 Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0. | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-50133 Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0. | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-50133 Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html") had their body emitted verbatim into the rendered page. A site that ingests HTML content from an untrusted source could therefore be served stored cross-site scripting. This vulnerability is fixed in 0.162.0. | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-50133 Hugo is a static site generator. Prior to 0.162.0, Hugo accepts conten ... | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| GHSA-c54g-xjwj-8g82 Hugo: XSS via text/html content files | 0% Низкий | 5 месяцев назад | |
| ALT-PU-2026-8450 ALT-PU-2026-8450: package `hugo` update to version 0.162.0-alt1 | CVSS3: 8.1 | 5 месяцев назад |
Уязвимостей на страницу