Skip to content
OpenAdvisories

Package · Go

github.com/gohugoio/hugo

11 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7

    Hugo can execute a binary from the current directory on Windows

    Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%PATH%` on Windows. In Hugo before version 0.79.1, if a malic…