LI
Product
libsoup
36
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 5High 13Medium 16Low 0
Watch
Add libsoup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102560 | 9.8 | Sep 29 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth Affected: before 3.7.3 |
| CVE-2019-17266 | 9.8 | Oct 6 | libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's… Affected: 2.65.1 before 2.66.4; 2.67.1 through 2.68.1 |
| CVE-2018-12910 | 9.8 | Jul 5 | The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname Affected: 2.63.2 |
| CVE-2017-2885 | 9.8 | Apr 24 | An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58 Affected: 2.58 |
| CVE-2026-2369 | 9.1 | Mar 19 | Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources Affected: All versions, or not specified |
Showing 5
