undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-16729
Mariner
azl3 keda 2.14.1-19 on Azure Linux 3.0
Release Notes
2.14.1-19
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
The publication date reported by the vendor.
We collected the advisory from the official source.
The vendor changed the advisory after it was first published.
Our collector saw this advisory during a later source check.