{"uuid": "90a79359-15a1-4fe7-b529-152d7c19c660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89259", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvajeetqqz2f", "content": "Hugo static site generator (<0.165.0) hit by CRITICAL CVE-2026-89259: Node tools can access files outside project dirs. Upgrade to 0.165.0 or restrict exec.allow in hugo.toml. https://radar.offseq.com/threat/cve-2026-89259-execution-with-unnecessary-privileges-in-gohugoio-hugo-3319ecf718eb9ea0 #O...", "creation_timestamp": "2026-09-11T12:00:31.401368Z"}