Skip to content
Vulnerability intelligence

CVE-2026-97030: Go's html/template package keyword yield not being recognised

The security content of this release comes mostly from upgrades to the tools Hugo is built on. One change limits what a theme can do.

Hugo 2026
What WebPulse reported · 1 analysis
Hugo 0.168.0 ships Go security fixes and stops themes overriding dependencies

The security content of this release comes mostly from upgrades to the tools Hugo is built on. One change limits what a theme can do.

October 14, 2026
View CVE-2026-97030 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-94448 CVE-2026-56857 CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181