Gnome

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches t

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes tha

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch betw

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection

A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism doe

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW`

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the gli

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-seriali

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene

A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` compo

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracke

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially craf

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_commo

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loade

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies

A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resour

A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs

A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage

A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function

A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because

A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted H

A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RF

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended de

A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (C

A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injec