kubectl (1.36.3-ubuntu22.04u5) jammy; urgency=low

  * [HIGH] CVE-2026-25681 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cr...
  * [HIGH] CVE-2026-27136 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting vi...
  * [HIGH] CVE-2026-33814 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Servi...
  * [HIGH] CVE-2026-39821 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege esc...
  * [HIGH] CVE-2026-56852 in golang.org/x/text (v0.33.0), golang.org/x/text (v0.33.0) - golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 inp...
  * [MEDIUM] CVE-2026-25680 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excess...
  * [MEDIUM] CVE-2026-42502 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting vi...
  * [MEDIUM] CVE-2026-42506 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via...
  * [UNKNOWN] CVE-2026-39824 in golang.org/x/sys (v0.40.0), golang.org/x/sys (v0.40.0) - Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
  * [UNKNOWN] CVE-2026-46600 in golang.org/x/net (v0.49.0), golang.org/x/net (v0.49.0) - Parsing an invalid SVCB or HTTPS RR can panic when the size of a param...
 -- azcu-bot <azcu-publishing@microsoft.com>  Thu, 06 Aug 2026 00:00:00 +0000

