CVE-2026-89258 - hugo
Versions of Hugo from 0.123.0 up to 0.164.x can follow symbolic links placed in a theme folder and read files that are outside the website’s directory. This can let an attacker or a…

Too many irrelevant or confusing CVEs? Use stackflag.com

#hugo #gohugoio #CVE #infosec

CVE-2026-89259 - hugo
Versions of Hugo from 0.43 up to 0.164 let the TailwindCSS tool run with very loose permissions, so a script called during site building could access files outside the project folder.…

Too many irrelevant or confusing CVEs? Use stackflag.com

#hugo #gohugoio #CVE #infosec