LI
Product
libsoup
by GNOME · last CVE Sep 29, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 5High 13Medium 16Low 0
Watch

Add libsoup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-66337
6.5
0%
Jul 24
Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
Affected: All versions, or not specified
CVE-2026-66339
6.5
0%
Jul 24
Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
Affected: All versions, or not specified
CVE-2026-3633
6.5
0%
Mar 17
Libsoup: libsoup: header and http request injection via crlf injection
Affected: All versions, or not specified
CVE-2026-3634
6.5
0%
Mar 17
Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
Affected: All versions, or not specified
CVE-2026-1801
6.5
0%
Feb 3
Libsoup: libsoup: http request smuggling via malformed chunk headers
Affected: All versions, or not specified
CVE-2025-2784
6.5
1%
Apr 3
A flaw was found in libsoup
Affected: before 3.6.5
CVE-2024-52531
6.5
1%
Nov 11
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict
Affected: before 3.6.1
CVE-2018-11713
6.5
2%
Jun 4
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0,…
Affected: before 2.62.0
CVE-2026-1539
5.8
0%
Jan 28
Libsoup: libsoup: credential leakage via http redirects
Affected: All versions, or not specified
CVE-2026-3632
5.5
0%
Mar 17
Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
Affected: All versions, or not specified
CVE-2026-2708
5.3
0%
Apr 23
Libsoup: libsoup: http request smuggling via duplicate content-length headers
Affected: All versions, or not specified
CVE-2026-2443
5.3
0%
Feb 13
Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure
Affected: All versions, or not specified
CVE-2026-1536
5.3
0%
Jan 28
Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header
Affected: All versions, or not specified
CVE-2026-1467
5.3
0%
Jan 27
Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured
Affected: All versions, or not specified
CVE-2026-12549
4.8
0%
Jun 22
Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
Affected: All versions, or not specified
CVE-2026-12548
4.2
0%
Jul 21
Libsoup: heap out-of-bounds read in libsoup due to integer truncation
Affected: All versions, or not specified
Showing 16