logoalt Hacker News

vntoktoday at 6:44 PM1 replyview on HN

Sorry in advance if you were joking, but for readers who aren't in the know: Hugo had, in fact, two 9.3 CVSS vulnerabilities just 11 days ago...

https://app.opencve.io/cve/CVE-2026-89259

https://app.opencve.io/cve/CVE-2026-89258


Replies

aboundtoday at 6:54 PM

To be clear, those are CVEs in the tooling, not in the generated static sites. Not great, but very different from this WordPress CVE