LI
Product
Libsoup
35
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 5High 12Medium 16Low 0
Watch
Add Libsoup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102559 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking Affected: before 3.7.3 |
| CVE-2026-102558 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth Affected: before 3.7.3 |
| CVE-2026-102557 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly Affected: before 3.7.3 |
| CVE-2026-102556 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion Affected: before 3.7.3 |
| CVE-2026-102555 | 8.2 | Sep 29 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding Affected: before 3.7.3 |
| CVE-2026-5119 | 8.2 | Mar 30 | Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment Affected: All versions, or not specified |
| CVE-2026-2436 | 8.2 | Mar 26 | Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake Affected: All versions, or not specified |
| CVE-2026-4271 | 7.5 | Mar 17 | Libsoup: libsoup: denial of service via use-after-free in http/2 server Affected: All versions, or not specified |
| CVE-2024-52532 | 7.5 | Nov 11 | GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption Affected: before 3.6.1 |
| CVE-2024-52530 | 7.5 | Nov 11 | GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0:… Affected: before 3.6.0 |
| CVE-2026-3099 | 7.3 | Mar 12 | A flaw was found in Libsoup Affected: All versions, or not specified |
| CVE-2026-66338 | 7.2 | Jul 24 | Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() Affected: All versions, or not specified |
Showing 12
