Known vulnerabilities in libsoup

Software: libsoup
Software CPE: cpe:2.3:a:gnome:libsoup:*:*:*:*:*:*:*:*
Total vulnerabilities: 40
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libsoup libsoup is affected by 40 known vulnerabilities: 2 critical, 6 high, 21 medium, 11 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122822 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1801
CWE-444 Medium
No
No
- 13.02.2026 SB2026021346
SB2026030549
SB20260626225
and 3 more
#VU122821 - Buffer Access with Incorrect Length Value
CVE-2026-0716
CWE-805 High
No
No
- 13.02.2026 SB2026021345
SB2026021351
SB2026021352
and 18 more
#VU122663 - Stack-based buffer overflow
CVE-2026-0719
CWE-121 Critical
No
No
- 11.02.2026 SB2026021138
SB2026021139
SB2026021140
and 34 more
#VU122662 - Stack-based buffer overflow
CVE-2026-1761
CWE-121 Critical
No
No
- 11.02.2026 SB2026021138
SB2026021143
SB2026021144
and 33 more
#VU122661 - Exposure of sensitive information to an unauthorized actor
CVE-2026-1539
CWE-200 Low
No
No
- 11.02.2026 SB2026021137
SB2026021167
SB2026021224
and 13 more
#VU122660 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1536
CWE-93 Medium
No
No
- 11.02.2026 SB2026021137
SB2026021174
SB2026021224
and 5 more
#VU122659 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1467
CWE-93 Medium
No
No
- 11.02.2026 SB2026021137
SB2026021224
SB2026021381
and 8 more
#VU119965 - Use After Free
CVE-2025-12105
CWE-416 Low
No
No
- 15.12.2025 SB2025121536
SB2025121537
SB2025121553
and 8 more
#VU119956 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-14523
CWE-444 Medium
No
No
- 15.12.2025 SB2025121511
SB2026011201
SB2026011202
and 36 more
#VU117708 - Out-of-bounds read
CVE-2025-11021
CWE-125 Medium
No
No
- 28.10.2025 SB2025102860
SB2025102862
SB2025102864
and 20 more
#VU115012 - Use of Cache Containing Sensitive Information
CVE-2025-9901
CWE-524 Medium
No
No
- 09.09.2025 SB2025090959
#VU109947 - Out-of-bounds read
CVE-2025-4969
CWE-125 Medium
No
No
- 29.05.2025 SB2025052993
SB2025053009
SB2025053020
and 15 more
#VU109946 - Integer overflow
CVE-2025-4945
CWE-190 High
No
No
- 29.05.2025 SB2025052993
SB2025053009
SB2025053020
and 27 more
#VU109945 - Integer underflow
CVE-2025-4948
CWE-191 Low
No
No
- 29.05.2025 SB2025052993
SB20250529113
SB20250529114
and 36 more
#VU109944 - NULL Pointer Dereference
CVE-2025-4476
CWE-476 Medium
No
No
- 29.05.2025 SB2025052993
SB20250529157
SB2025053009
and 14 more
#VU109943 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4035
CWE-200 Medium
No
No
- 29.05.2025 SB2025052993
SB20250529114
SB2025092820
#VU109942 - Out-of-bounds read
CVE-2025-32914
CWE-125 Medium
No
No
- 29.05.2025 SB2025052993
SB20250529101
SB20250529113
and 29 more
#VU109941 - Resource exhaustion
CVE-2025-32907
CWE-400 Medium
No
No
- 29.05.2025 SB2025052993
SB2025052994
SB2025052995
and 27 more
#VU109940 - Resource exhaustion
CVE-2025-32049
CWE-400 Medium
No
No
- 29.05.2025 SB2025052993
SB20250529113
SB20250529114
and 22 more
#VU109937 - Missing release of memory after effective lifetime
CVE-2025-46420
CWE-401 Low
No
No
3.6.3 29.05.2025 SB2025052992
SB20250529101
SB20250529102
and 29 more


Showing elements 1 - 20 out of 40