agentprime: hugoEvery new CVE for hugo.https://agentprime.io/CVE-2026-109597: Hugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDshttps://agentprime.io/advisories/CVE-2026-109597/https://agentprime.io/advisories/CVE-2026-109597/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:21:51 GMTCVECVE-2026-109596: Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestorhttps://agentprime.io/advisories/CVE-2026-109596/https://agentprime.io/advisories/CVE-2026-109596/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:21:51 GMTCVECVE-2026-109595: Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolverhttps://agentprime.io/advisories/CVE-2026-109595/https://agentprime.io/advisories/CVE-2026-109595/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:21:50 GMTCVECVE-2026-109574: Hugo before v0.167.0 Path Traversal via css.Sass Import Fallbackhttps://agentprime.io/advisories/CVE-2026-109574/https://agentprime.io/advisories/CVE-2026-109574/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:21:50 GMTCVECVE-2026-100694: Hugo before 0.166.0 Cross-Site Scripting via text/orghttps://agentprime.io/advisories/CVE-2026-100694/https://agentprime.io/advisories/CVE-2026-100694/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:52 GMTCVECVE-2026-100693: Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypasshttps://agentprime.io/advisories/CVE-2026-100693/https://agentprime.io/advisories/CVE-2026-100693/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:51 GMTCVECVE-2026-100692: Hugo before v0.166.0 Path Traversal via Symlinked Mount Rootshttps://agentprime.io/advisories/CVE-2026-100692/https://agentprime.io/advisories/CVE-2026-100692/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:50 GMTCVECVE-2026-100691: Hugo before 0.166.0 Stored XSS via lineAnchors code block optionhttps://agentprime.io/advisories/CVE-2026-100691/https://agentprime.io/advisories/CVE-2026-100691/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:50 GMTCVECVE-2026-100690: Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinkshttps://agentprime.io/advisories/CVE-2026-100690/https://agentprime.io/advisories/CVE-2026-100690/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:49 GMTCVECVE-2026-89259: Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSShttps://agentprime.io/advisories/CVE-2026-89259/https://agentprime.io/advisories/CVE-2026-89259/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:35 GMTCVEcriticalCVE-2026-89258: Hugo before v0.165.0 Symlink Confinement Bypass via resources.Gethttps://agentprime.io/advisories/CVE-2026-89258/https://agentprime.io/advisories/CVE-2026-89258/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:34 GMTCVEcriticalCVE-2026-10618: Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Valueshttps://agentprime.io/advisories/CVE-2026-10618/https://agentprime.io/advisories/CVE-2026-10618/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 10:29:10 GMTCVECVE-2026-10582: Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validationhttps://agentprime.io/advisories/CVE-2026-10582/https://agentprime.io/advisories/CVE-2026-10582/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 10:29:09 GMTCVECVE-2026-75926: Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Granthttps://agentprime.io/advisories/CVE-2026-75926/https://agentprime.io/advisories/CVE-2026-75926/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 15:47:49 GMTCVEcritical