Skip to content
OpenAdvisories

Package · npm

hexo

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-39584 EPSS 35%

    Hexo `include_code` has a path traversal

    Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

    hexo npm
  • Medium 5.0
    CVE-2021-25987

    Hexo - Stored XSS

    Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

    Hexo Hexo hexo npm