LI
Product
libsoup
36
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 5High 13Medium 16Low 0
Watch
Add libsoup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-66337 | 6.5 | Jul 24 | Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() Affected: All versions, or not specified |
| CVE-2026-66339 | 6.5 | Jul 24 | Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels Affected: All versions, or not specified |
| CVE-2026-3633 | 6.5 | Mar 17 | Libsoup: libsoup: header and http request injection via crlf injection Affected: All versions, or not specified |
| CVE-2026-3634 | 6.5 | Mar 17 | Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header Affected: All versions, or not specified |
| CVE-2026-1801 | 6.5 | Feb 3 | Libsoup: libsoup: http request smuggling via malformed chunk headers Affected: All versions, or not specified |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: before 3.6.5 |
| CVE-2024-52531 | 6.5 | Nov 11 | GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict Affected: before 3.6.1 |
| CVE-2018-11713 | 6.5 | Jun 4 | WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0,… Affected: before 2.62.0 |
| CVE-2026-1539 | 5.8 | Jan 28 | Libsoup: libsoup: credential leakage via http redirects Affected: All versions, or not specified |
| CVE-2026-3632 | 5.5 | Mar 17 | Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames Affected: All versions, or not specified |
| CVE-2026-2708 | 5.3 | Apr 23 | Libsoup: libsoup: http request smuggling via duplicate content-length headers Affected: All versions, or not specified |
| CVE-2026-2443 | 5.3 | Feb 13 | Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure Affected: All versions, or not specified |
| CVE-2026-1536 | 5.3 | Jan 28 | Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header Affected: All versions, or not specified |
| CVE-2026-1467 | 5.3 | Jan 27 | Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured Affected: All versions, or not specified |
| CVE-2026-12549 | 4.8 | Jun 22 | Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver Affected: All versions, or not specified |
| CVE-2026-12548 | 4.2 | Jul 21 | Libsoup: heap out-of-bounds read in libsoup due to integer truncation Affected: All versions, or not specified |
Showing 16
