AZL-99864

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99864.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-99864

Upstream

CVE-2026-80255

Published

2026-09-06T18:17:22Z

Modified

2026-09-08T12:40:09Z

Summary

CVE-2026-80255 affecting package rust 1.90.0-10

Details

A Set-Cookie: header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-80255

Affected packages

Azure Linux:3 / rust

Package

Name: rust
Purl: pkg:rpm/azure-linux/rust

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.85.0

Last Affected

1.90.0-10

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99864.json"