undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-16729
Mariner
azl3 javapackages-bootstrap 1.14.0-4 on Azure Linux 3.0
azl3 httpd 2.4.68-1 on Azure Linux 3.0
Release Notes
The publication date reported by the vendor.
We collected the advisory from the official source.
Our collector saw this advisory during a later source check.