AZL-110226

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110226.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-110226

Upstream

CVE-2026-87862

Published

2026-10-20T21:17:20Z

Modified

2026-10-27T05:36:16Z

Summary

CVE-2026-87862 affecting package rust 1.96.1-2

Details

Importing a includeSubDomains parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-87862

Affected packages

Azure Linux:3 / rust

Package

Name: rust
Purl: pkg:rpm/azure-linux/rust

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.85.0

Last Affected

1.96.1-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110226.json"