Skip to content
OpenAdvisories
Medium RHSA-2026:7848 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Sep 8, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 hugo 0:0.160.1-2.hum1

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-35166

    Hugo does not properly escape some Markdown links

    Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affec…

    gohugoio hugo hugo hugo Debian Ubuntu Go

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-35166
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7848.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2455512
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-35166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-35166
  • article
    https://github.com/gohugoio/hugo/security/advisories/GHSA-mcv8-8m8x-48pg