buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2025-3527" }