Hugo_jll
JLSEC-2026-796Medium 5.1UpstreamXSS via unescaped code-fence language in default code block rendererJLSEC-2026-795Medium 6.3UpstreamHugo: security.http.urls allow-list bypass via HTTP redirectsJLSEC-2026-794Medium 5.1UpstreamHugo: XSS via text/html content filesJLSEC-2026-793Medium 6.2UpstreamHugo's Node tool execution allows file system access outside the project directoryJLSEC-2026-792Medium 5.3UpstreamHugo: Certain markdown links are not properly escaped