Skip to content
Vulnerability intelligence

CVE-2026-56857 — Hugo Vulnerability

The security content of this release comes mostly from upgrades to the tools Hugo is built on. One change limits what a theme can do.

Hugo 2026
What WebPulse reported · 1 analysis
Hugo 0.168.0 ships Go security fixes and stops themes overriding dependencies

The security content of this release comes mostly from upgrades to the tools Hugo is built on. One change limits what a theme can do.

October 14, 2026
View CVE-2026-56857 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-97030 CVE-2026-94448 CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181