📦 Libsoup

CVE-2025-2784 is a heap buffer over-read vulnerability in libsoup's skip_insight_whitespace() function. When processing a malicious HTTP response, libsoup clients can read one byte beyond allocated me...

This vulnerability in GNOME libsoup allows HTTP request smuggling by ignoring null characters at the end of HTTP header names. Attackers can craft malicious requests that bypass security controls, pot...

CVE-2024-52532 is a denial-of-service vulnerability in GNOME libsoup's WebSocket implementation where certain malicious data patterns cause infinite loops and excessive memory consumption. This affect...