AZL-110166

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110166.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-110166
Upstream
  • CVE-2026-86412
Published
2026-10-20T20:17:25Z
Modified
2026-10-27T05:36:16Z
Summary
CVE-2026-86412 affecting package rust 1.75.0-31
Details

A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for --cookie and --cookie-jar, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains.

References

Affected packages

Azure Linux:3 / rust

Package

Name
rust
Purl
pkg:rpm/azure-linux/rust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
1.75.0-31

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110166.json"