www/gohugo -- CWE-79: XSS vulnerabilitiesentered 2026-05-29
no CVE referenced
CVE details
CVE-2026-39826
If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.
- Score
- 6.1 medium
- Published
- 2026-05-07
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.