Microsoft Vcpkg vulnerabilities

• microsoft vcpkg openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element) CVE-2026-34054 7.8 HighMarch 31, 2026