Threats Tagged 'ghsa-8wm8-3499-x4v9'

1 threat

Threats Tagged 'ghsa-8wm8-3499-x4v9'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	7.2	EPSS 0.3%	CVE-2026-66338libsoup2.4 · Libsoup2.4: A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs… (CVE-2026-66338) Medium7.2EPSS 0.3%2026-07-24GCVE DatabaseCVE-2026-66338 A vulnerability in libsoup's chunked transfer encoding parser allows permissive parsing of chunk sizes that violate RFC 9112. This flaw can lead to HTTP request smuggling when libsoup is used behind a strict frontend proxy. The parser accepts chunk sizes with leading whitespace, plus sign prefixes, and trailing invalid characters. The practical impact is limited because libsoup servers are rarely deployed in internet-facing roles behind reverse proxies. The vulnerability has a CVSS score of 7.2, indicating a medium severity level. EPSS 0.3%Vulnerability #ghsa-8wm8-3499-x4v9	GCVE Database	2026-07-24

Showing 1–1 of 1 result