Threats Tagged 'ghsa-vh9q-f797-xwg7'

1 threat

Threats Tagged 'ghsa-vh9q-f797-xwg7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2026-66339libsoup2.4 · Libsoup2.4: A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization… (CVE-2026-66339) Medium6.5EPSS 0.2%2026-07-24GCVE DatabaseCVE-2026-66339 A vulnerability in libsoup2.4 causes the Proxy-Authorization header to be incorrectly attached to HTTPS requests after a CONNECT tunnel is established through an HTTP proxy. This flaw allows the destination server to capture proxy credentials, leading to information disclosure. The issue affects multiple specific versions of libsoup2.4 prior to fixed releases. The vulnerability has a CVSS 3.1 score of 6.5 (medium severity). A patch is available to address this issue. EPSS 0.2%Vulnerability #ghsa-vh9q-f797-xwg7	GCVE Database	2026-07-24

Showing 1–1 of 1 result