Libsoup

This hub aggregates every CVE we track for Libsoup, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Libsoup.

• CVE-2026-6324Libsoup: libsoup: http request smuggling via unsigned to signed conversion error4.8May 29, 2026
• CVE-2026-2708Libsoup: libsoup: http request smuggling via duplicate content-length headers3.7Apr 23, 2026
• CVE-2026-5119Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment5.9Mar 30, 2026
• CVE-2026-2436Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake6.5Mar 26, 2026
• CVE-2026-2369Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources6.5Mar 19, 2026
• CVE-2026-4271Libsoup: libsoup: denial of service via use-after-free in http/2 server5.3Mar 17, 2026
• CVE-2026-3632Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames3.9Mar 17, 2026
• CVE-2026-3633Libsoup: libsoup: header and http request injection via crlf injection3.9Mar 17, 2026
• CVE-2026-3634Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header3.9Mar 17, 2026
• CVE-2026-3099Libsoup: libsoup: authentication bypass via digest authentication replay attack5.8Mar 12, 2026
• CVE-2026-2443Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure5.3Feb 13, 2026
• CVE-2026-1801Libsoup: libsoup: http request smuggling via malformed chunk headers5.3Feb 3, 2026
• CVE-2026-1760Libsoup: soupserver: denial of service via http request smuggling5.3Feb 2, 2026
• CVE-2026-1761Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response8.6Feb 2, 2026
• CVE-2026-1539Libsoup: libsoup: credential leakage via http redirects5.8Jan 28, 2026