Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's…

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58

A flaw was found in libsoup

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

A flaw was found in libsoup's SoupServer

A flaw was found in libsoup, a library for handling HTTP requests

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0:…

A flaw was found in Libsoup

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()

Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

A flaw was found in libsoup

A flaw was found in libsoup

A flaw was found in libsoup, an HTTP client/server library

A flaw was found in libsoup

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0,…

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations

A flaw was found in libsoup, a library used by applications to send network requests

Libsoup: libsoup: http request smuggling via duplicate content-length headers

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems

A flaw was found in libsoup

A flaw was found in libsoup, an HTTP client library

Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver

Libsoup: heap out-of-bounds read in libsoup due to integer truncation

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by…

Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI