Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

libsoup Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-66337`Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-66338`Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-66339`Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-12548`Libsoup: heap out-of-bounds read in libsoup due to integer truncation	Exploitation statusPublic exploit	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-12549`Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityMedium
`CVE-2026-2708`Libsoup: libsoup: http request smuggling via duplicate content-length headers	Exploitation statusNot known exploited	FixNot confirmed	Published04/23/2026	SeverityLow
`CVE-2026-5119`Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment	Exploitation statusNot known exploited	FixNot confirmed	Published03/30/2026	SeverityMedium
`CVE-2026-2436`Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake	Exploitation statusNot known exploited	FixNot confirmed	Published03/26/2026	SeverityMedium
`CVE-2026-2369`Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources	Exploitation statusNot known exploited	FixNot confirmed	Published03/19/2026	SeverityMedium
`CVE-2026-4271`Libsoup: libsoup: denial of service via use-after-free in http/2 server	Exploitation statusPublic exploit	FixNot confirmed	Published03/17/2026	SeverityMedium
`CVE-2026-3633`Libsoup: libsoup: header and http request injection via crlf injection	Exploitation statusNot known exploited	FixNot confirmed	Published03/17/2026	SeverityLow
`CVE-2026-3632`Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames	Exploitation statusNot known exploited	FixNot confirmed	Published03/17/2026	SeverityLow
`CVE-2026-3634`Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header	Exploitation statusPublic exploit	FixNot confirmed	Published03/17/2026	SeverityLow
`CVE-2026-3099`Libsoup: libsoup: authentication bypass via digest authentication replay attack	Exploitation statusNot known exploited	FixNot confirmed	Published03/12/2026	SeverityMedium
`CVE-2026-2443`Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure	Exploitation statusNot known exploited	FixNot confirmed	Published02/13/2026	SeverityMedium
`CVE-2026-1801`Libsoup: libsoup: http request smuggling via malformed chunk headers	Exploitation statusNot known exploited	FixNot confirmed	Published02/03/2026	SeverityMedium
`CVE-2026-1539`Libsoup: libsoup: credential leakage via http redirects	Exploitation statusNot known exploited	FixNot confirmed	Published01/28/2026	SeverityMedium
`CVE-2026-1536`Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header	Exploitation statusNot known exploited	FixNot confirmed	Published01/28/2026	SeverityMedium
`CVE-2026-1467`Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured	Exploitation statusNot known exploited	FixNot confirmed	Published01/27/2026	SeverityMedium
`CVE-2025-12105`Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion	Exploitation statusNot known exploited	FixYes	Published10/23/2025	SeverityHigh
`CVE-2025-2784`Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	Exploitation statusPublic exploit	FixYes	Published04/03/2025	SeverityHigh
`CVE-2024-52531`	Exploitation statusPublic exploit	FixYes	Published11/11/2024	SeverityHigh
`CVE-2024-52532`	Exploitation statusNot known exploited	FixNot confirmed	Published11/11/2024	SeverityHigh
`CVE-2024-52530`	Exploitation statusNot known exploited	FixNot confirmed	Published11/11/2024	SeverityHigh
`CVE-2019-17266`	Exploitation statusNot confirmed	FixNot confirmed	Published10/06/2019	SeverityUnknown
`CVE-2018-12910`	Exploitation statusNot confirmed	FixNot confirmed	Published07/05/2018	SeverityUnknown
`CVE-2018-11713`	Exploitation statusNot confirmed	FixNot confirmed	Published06/04/2018	SeverityUnknown
`CVE-2017-2885`	Exploitation statusNot confirmed	FixNot confirmed	Published04/24/2018	SeverityCritical
`CVE-2012-2132`	Exploitation statusNot confirmed	FixNot confirmed	Published08/20/2012	SeverityUnknown
`CVE-2011-2524`	Exploitation statusNot confirmed	FixNot confirmed	Published08/31/2011	SeverityUnknown

30 / 30 Results

All vulnerabilities loaded

Security vulnerabilities in libsoup

libsoup

How many security vulnerabilities does libsoup currently have?

Does the latest version of libsoup have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management