{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T04:26:42.957","vulnerabilities":[{"cve":{"id":"CVE-2024-32875","sourceIdentifier":"security-advisories@github.com","published":"2024-04-23T21:15:48.837","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in internal render hooks. Hugo users who are impacted are those who have these hooks enabled and do not trust their Markdown content files. The issue is patched in v0.125.3. As a workaround, replace the templates with user defined templates or disable the internal templates."},{"lang":"es","value":"Hugo es un generador de sitios estáticos. A partir de la versión 0.123.0 y antes de la versión 0.125.3, los argumentos de título en Markdown para enlaces e imágenes no escaparon en ganchos de renderizado internos. Los usuarios de Hugo que se ven afectados son aquellos que tienen estos enlaces habilitados y no confían en sus archivos de contenido de Markdown. El problema se solucionó en v0.125.3. Como workaround, reemplace las plantillas con plantillas definidas por el usuario o desactive las plantillas internas."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"CWE-80"}]}],"references":[{"url":"https://github.com/gohugoio/hugo/releases/tag/v0.125.3","source":"security-advisories@github.com"},{"url":"https://github.com/gohugoio/hugo/security/advisories/GHSA-ppf8-hhpp-f5hj","source":"security-advisories@github.com"},{"url":"https://gohugo.io/getting-started/configuration-markup/#renderhooksimageenabledefault","source":"security-advisories@github.com"},{"url":"https://github.com/gohugoio/hugo/releases/tag/v0.125.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/gohugoio/hugo/security/advisories/GHSA-ppf8-hhpp-f5hj","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gohugo.io/getting-started/configuration-markup/#renderhooksimageenabledefault","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}