CVE Daily – Tailwind CSS (High+Critical) https://cvedaily.com/pages/tags/tailwind-css.html CVE Daily – Tailwind CSS (High+Critical) en Wed, 03 Jun 2026 21:26:45 +0000 [High] CVE-2026-44301 – Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hu... https://nvd.nist.gov/vuln/detail/CVE-2026-44301 https://nvd.nist.gov/vuln/detail/CVE-2026-44301 Tue, 12 May 2026 22:16:36 +0000 High CVE-2026-44301

Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipelines (PostCSS, Babel, TailwindCSS), Hugo invoked the configured Node tools without restrictions on file system access. As a result, executing hugo against an untrusted site could allow code running through these tools to read or write files outside the project's working director…

CVSS: 8.1 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2025-53104 – gluestack-ui is a library of copy-pasteable components & patterns crafted with T... https://nvd.nist.gov/vuln/detail/CVE-2025-53104 https://nvd.nist.gov/vuln/detail/CVE-2025-53104 Tue, 01 Jul 2025 19:15:27 +0000 Critical CVE-2025-53104

gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS (NativeWind). Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields (title, body, etc.) were directly interpolated into shell commands in a run: block. An attacker could craft a malicious GitHub Discussi…

CVSS: 9.1 · CWE: CWE-77

View on NVD

]]>