moby-buildx (0.36.1-debian12u3) bookworm; urgency=low

  * [HIGH] CVE-2026-33818 in stdlib (v1.26.5) - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recu...
  * [HIGH] CVE-2026-39821 in stdlib (v1.26.5) - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege esc...
  * [HIGH] CVE-2026-46600 in stdlib (v1.26.5) - golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of S...
  * [HIGH] CVE-2026-56853 in stdlib (v1.26.5) - net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to D...
  * [HIGH] CVE-2026-56858 in stdlib (v1.26.5) - html/template: golang: Go html/template: Cross-Site Scripting via pathologica...
  * [HIGH] CVE-2026-56859 in stdlib (v1.26.5) - encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth...
  * [HIGH] CVE-2026-56860 in stdlib (v1.26.5) - net/url: golang: golang net/url: Denial of Service from quadratic complexity...
  * [HIGH] CVE-2026-56862 in stdlib (v1.26.5) - crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUp...
 -- azcu-bot <azcu-publishing@microsoft.com>  Mon, 17 Aug 2026 00:00:00 +0000

