Vulnerabilities

TI-2026-65425 CVE-2026-102560 · GHSA-9v45-6jmj-gmwr

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

MEDIUM 49

A flaw was found in libsoup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00521 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +4 CWE-125

TI-2026-65424 CVE-2026-102559 · GHSA-cj4p-f4hv-cp74

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00625 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65423 CVE-2026-102558 · GHSA-xxgh-qh6h-jxc2

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00596 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65420 CVE-2026-102555 · GHSA-vfxx-hcqj-vrh4

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

MEDIUM 42

A flaw was found in libsoup.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00479 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 CWE-125

TI-2026-65422 CVE-2026-102557 · GHSA-fc8r-xmg7-v58h

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65421 CVE-2026-102556 · GHSA-q4x2-vf8m-46j5

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-843

TI-2026-47124 CVE-2026-66337 · GHSA-ww4c-c3rv-f96h

Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()

LOW 34

A flaw was found in libsoup.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00246 Published 2026-07-24 Fix deferred CWE-125

TI-2026-47125 CVE-2026-66338 · GHSA-8wm8-3499-x4v9

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

LOW 31

A flaw was found in libsoup.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00291 Published 2026-07-24 Fix deferred CWE-444

TI-2026-47126 CVE-2026-66339 · GHSA-vh9q-f797-xwg7

Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

LOW 28

A flaw was found in libsoup.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00249 Published 2026-07-24 Fix deferred CWE-201

TI-2026-10764 CVE-2026-12548 · GHSA-wmh6-vpqv-v8q3

Libsoup: heap out-of-bounds read in libsoup due to integer truncation

MEDIUM 53

A heap out-of-bounds read flaw was found in libsoup.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00254 Published 2026-07-21 Fix deferred CWE-125

TI-2026-10765 CVE-2026-12549 · GHSA-7gwx-vgp2-4hmg

Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver

LOW 22

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00357 Published 2026-06-22 Fix deferred CWE-805

TI-2026-02318 CVE-2026-2708 · GHSA-2m77-r9w3-w44v

Libsoup: libsoup: http request smuggling via duplicate content-length headers

LOW 24

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00321 Published 2026-04-23 Fix deferred CWE-444

TI-2026-04469 CVE-2026-5119 · GHSA-j666-j6hj-fpc7

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

LOW 35

A flaw was found in libsoup.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00259 Published 2026-03-30 Partial fix · 3.6.5-3.el10_1.11, 3.6.5-3.el10_2.11 +12 CWE-319

TI-2026-02068 CVE-2026-2436 · GHSA-wpfw-5xvc-wq9w

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

LOW 36

A flaw was found in libsoup's SoupServer.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00455 Published 2026-03-26 Fix deferred CWE-825

TI-2026-02005 CVE-2026-2369 · GHSA-rm63-3cv3-qm5w

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

MEDIUM 46

A flaw was found in libsoup.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00437 Published 2026-03-19 Fix deferred CWE-191

TI-2026-03716 CVE-2026-4271 · GHSA-xxmc-fm3p-q3x8

Libsoup: libsoup: denial of service via use-after-free in http/2 server

HIGH 72

A flaw was found in libsoup, a library for handling HTTP requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0088 Published 2026-03-17 Partial fix · 3.6.5-3.el10_1.11, 3.6.5-3.el10_2.11 +1 CWE-416

TI-2026-03133 CVE-2026-3633 · GHSA-6p72-283f-crv2

Libsoup: libsoup: header and http request injection via crlf injection

LOW 28

A flaw was found in libsoup.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00237 Published 2026-03-17 Fix deferred CWE-93

TI-2026-03132 CVE-2026-3632 · GHSA-v5mp-vx4p-jwp6

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

LOW 24

A flaw was found in libsoup, a library used by applications to send network requests.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0022 Published 2026-03-17 Fix deferred CWE-1286

TI-2026-03134 CVE-2026-3634 · GHSA-jx6g-363c-pprr

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

MEDIUM 62

A flaw was found in libsoup.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00195 Published 2026-03-17 Fix deferred CWE-93

TI-2026-02676 CVE-2026-3099 · GHSA-hrf3-6c7v-5628

Libsoup: libsoup: authentication bypass via digest authentication replay attack

LOW 32

A flaw was found in Libsoup.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00418 Published 2026-03-12 Will not fix CWE-323

TI-2026-02074 CVE-2026-2443 · GHSA-hg24-p7xv-jhq8

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

LOW 31

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00488 Published 2026-02-13 Fix deferred CWE-125

TI-2026-01479 CVE-2026-1801 · GHSA-xv49-34rf-rqv4

Libsoup: libsoup: http request smuggling via malformed chunk headers

LOW 35

A flaw was found in libsoup, an HTTP client/server library.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00421 Published 2026-02-03 Fix deferred CWE-444

TI-2026-01228 CVE-2026-1539 · GHSA-wj9p-f539-2mhr

Libsoup: libsoup: credential leakage via http redirects

LOW 32

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00274 Published 2026-01-28 Fix deferred CWE-201

TI-2026-01226 CVE-2026-1536 · GHSA-x4cc-vgcc-h5h4

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header

LOW 32

A flaw was found in libsoup.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00344 Published 2026-01-28 Fix deferred CWE-93

TI-2026-01164 CVE-2026-1467 · GHSA-8pm5-xr39-vfv3

Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured

LOW 26

A flaw was found in libsoup, an HTTP client library.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00374 Published 2026-01-27 Fix deferred CWE-93

Vulnerabilities

Filters