Libsoup CVE-2026-66339

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of he

A flaw was found in libsoup. Rated high severity (CVSS 7.0), this vulnerability is remotely exploitable, no authenticati

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_pars

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. Rated high severity (CVSS 7.5), this vulnerabil

HTTP request smuggling in libsoup (GNOME's HTTP client/server library) enables network-accessible attackers to inject hi

Heap buffer over-read in libsoup's multipart response parser allows remote, unauthenticated attackers to crash client ap

libsoup versions prior to the patched release contain an integer underflow vulnerability in zero-length resource process

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKit

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, w

Heap out-of-bounds read in libsoup's multipart HTTP message parser allows remote attackers to crash affected application