ZIP
WinGet
Hugo
The Hugo Authors · 0.125.3 · arm64
Before deploying, verify this file with VirusTotal ↗
Silent Commands
Distributed as a ZIP archive — extract the contents and run the executable directly. No installer is included.
File Identity
Filename
hugo_0.125.3_windows-arm64.zip
Signature
Status
Upload installer to verify signature
Installer Selection
WinGet Package
Package ID
Hugo.Hugo
Version
0.125.3
Description
The world’s fastest framework for building websites
License
Apache-2.0
↗
Homepage
https://gohugo.io/
Support
https://discourse.gohugo.io/
Installer URL
https://github.com/gohugoio/hugo/releases/download/v0.125.3/hugo_0.125.3_windows-arm64.zip
Release Notes
This release fixes a security issue reported by @ejona86 (see #12411) that could allow XSS injection from Markdown content files if one of the internal link or image render hook templates added in Hugo 0.123.0 are enabled. You typically control and trust the content files, but according to Hugo's security model, we state that "template and configuration authors (you) are trusted, but the data you send in is not."
- markup/goldmark: Fix data race in the hugocontext wrapper 509ab08c1 @bep
- tpl: E…