Back to vendor advisories
Microsoft Security Response CenterCVE-2026-78661

Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

HighVendor CVSS 7.5 / 10 1 CVE Published Oct 31, 2026 at 1:07 AM UTC

Summary

Mariner

Products covered

  • azl3 containerized-data-importer 1.62.0-9 on Azure Linux 3.0

  • azl3 cri-tools 1.32.0-10 on Azure Linux 3.0

  • azl3 kubernetes 1.30.10-32 on Azure Linux 3.0

  • azl3 multus 4.0.2-12 on Azure Linux 3.0

  • azl3 prometheus-adapter 0.12.0-12 on Azure Linux 3.0

  • azl3 cni-plugins 1.4.0-6 on Azure Linux 3.0

  • azl3 libcontainers-common 20240213-3 on Azure Linux 3.0

  • azl3 nvidia-container-toolkit 1.17.8-4 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Updated by Microsoft Security Response Center

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.