Back to vendor advisories
Microsoft Security Response CenterCVE-2026-97045

Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

MediumVendor CVSS 6.1 / 10 1 CVE Published Oct 31, 2026 at 1:07 AM UTC

Summary

Mariner

Products covered

  • azl3 multus 4.0.2-12 on Azure Linux 3.0

  • azl3 packer 1.9.5-23 on Azure Linux 3.0

  • azl3 prometheus-adapter 0.12.0-12 on Azure Linux 3.0

  • azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0

  • azl3 nvidia-container-toolkit 1.17.8-4 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Updated by Microsoft Security Response Center

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.