AZL-110259
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110259.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-110259
- Upstream
- CVE-2026-86412
- Published
- 2026-10-20T20:17:25Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2026-86412 affecting package rust 1.96.1-2
- Details
-
A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for
--cookieand--cookie-jar, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains. - References