AZL-99843
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99843.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99843
- Upstream
- Published
- 2026-09-06T18:17:20Z
- Modified
- 2026-09-08T12:40:48Z
- Summary
- CVE-2026-19931 affecting package rust 1.90.0-10
- Details
-
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection.
- References