CVE-2023-39584: Hexo

High severity, CVSS 7.5. EPSS: 34.5% chance of exploitation in the next 30 days.

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

Affected products

• Hexo Hexo: up to and including 6.3.0; version 7.0.0 only

Published 2023-09-08. Last modified 2026-06-17.