36.0.18
Released 2026-10-14.
Fixed
-
Component-model handle tables are capped only per instance and charged to no limit.
GHSA-q554-3cjc-rx7p -
Filesystem sandbox escape when renaming symlinks with trailing slashes.
GHSA-m9f7-9w4p-gv38 -
Guests can send absolute-form HTTP requests to different hosts.
GHSA-5qpp-g3j2-8frx