Количество 13
Количество 13
CVE-2026-2708
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.
CVE-2026-2708
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.
CVE-2026-2708
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.
CVE-2026-2708
Libsoup: libsoup: http request smuggling via duplicate content-length headers
CVE-2026-2708
A request smuggling vulnerability exists in libsoup's HTTP/1 header pa ...
GHSA-2m77-r9w3-w44v
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.
SUSE-SU-2026:0690-1
Security update for libsoup
SUSE-SU-2026:0689-1
Security update for libsoup
SUSE-SU-2026:0657-1
Security update for libsoup2
SUSE-SU-2026:0703-1
Security update for libsoup
SUSE-SU-2026:0834-1
Security update for libsoup2
openSUSE-SU-2026:20384-1
Security update for libsoup
openSUSE-SU-2026:20354-1
Security update for libsoup2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-2708 A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-2708 A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-2708 A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headers | 0% Низкий | 3 месяца назад | |
| CVE-2026-2708 A request smuggling vulnerability exists in libsoup's HTTP/1 header pa ... | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
| GHSA-2m77-r9w3-w44v A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:0690-1 Security update for libsoup | 5 месяцев назад | ||
| SUSE-SU-2026:0689-1 Security update for libsoup | 5 месяцев назад | ||
| SUSE-SU-2026:0657-1 Security update for libsoup2 | 5 месяцев назад | ||
| SUSE-SU-2026:0703-1 Security update for libsoup | 5 месяцев назад | ||
| SUSE-SU-2026:0834-1 Security update for libsoup2 | 5 месяцев назад | ||
| openSUSE-SU-2026:20384-1 Security update for libsoup | 5 месяцев назад | ||
| openSUSE-SU-2026:20354-1 Security update for libsoup2 | 5 месяцев назад |
Уязвимостей на страницу