CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

libsoup — security advisories

vendor: GNOME17 advisories2 sourceslatest 2026-08-11⚡ RSS feed

Every advisory CSIRTS.com has correlated to libsoup, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch libsoup

Get an email when a new libsoup advisory drops — max one per day, one-click unsubscribe.

CVE-2026-77014: Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses

mediumCVSS 5.3CVE-2026-77014msrc2026-08-11

CVE-2026-3633: Libsoup: libsoup: header and http request injection via crlf injection

lowCVSS 3.9CVE-2026-3633msrc2026-08-06

CVE-2026-66338: Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

mediumCVSS 5.4CVE-2026-66338msrc2026-08-06

CVE-2026-66339: Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

mediumCVSS 6.5CVE-2026-66339msrc2026-08-06

CVE-2026-66337: Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()

mediumCVSS 6.5CVE-2026-66337msrc2026-08-06

CVE-2026-3634: Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

lowCVSS 3.9CVE-2026-3634msrc2026-08-06

CVE-2025-9901: Libsoup: improper handling of http vary header in libsoup caching

mediumCVSS 5.9CVE-2025-9901msrc2026-08-06

CVE-2025-8197: Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465

mediumCVSS 6.6CVE-2025-8197msrc2026-08-06

CVE-2026-3099: Libsoup: libsoup: authentication bypass via digest authentication replay attack

mediumCVSS 5.8CVE-2026-3099msrc2026-08-06

CVE-2026-3632: Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

lowCVSS 3.9CVE-2026-3632msrc2026-08-06

CVE-2026-15713: Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak

mediumCVSS 5.9CVE-2026-15713msrc2026-07-14

CVE-2026-15714: Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string

mediumCVSS 6.5CVE-2026-15714msrc2026-07-14

CVE-2026-15712: Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption

mediumCVSS 5.9CVE-2026-15712msrc2026-07-14

CVE-2026-15711: Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

highCVSS 7.5CVE-2026-15711msrc2026-07-14

CVE-2026-15709: Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service

highCVSS 7.5CVE-2026-15709msrc2026-07-14

CVE-2026-12547: Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch

lowCVSS 3.4CVE-2026-12547msrc2026-07-14

USN-8523-1: libsoup vulnerabilities

unknownCVE-2026-2369 CVE-2026-5119ubuntu2026-07-09