AZL-99810

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99810.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-99810

Upstream

CVE-2026-80255

Published

2026-09-06T18:17:22Z

Modified

2026-09-08T12:40:46Z

Summary

CVE-2026-80255 affecting package mysql 8.0.46-1

Details

A Set-Cookie: header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-80255

Affected packages

Azure Linux:3 / mysql

Package

Name: mysql
Purl: pkg:rpm/azure-linux/mysql

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

8.0.46-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99810.json"