tocsin

Alpine/hugo: unknown

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks.

Action: Upgrade hugo to 0.140.1-r0 or later.

Affected

introducedfixedlast affected
00.140.1-r0-

Fixed versions

0.140.1-r0

Sources

published · modified · JSON