libsoup, an HTTP client/server library for GNOME, has multiple security flaws related to WebSocket frame handling. These include improper signal emission causing heap corruption or crashes, inadequate size checks during message reassembly leading to heap corruption, and a heap buffer overflow when constructing masked client frames with large payloads. These vulnerabilities affect versions prior to 2.74.2-28.oe2203sp4 and have been assigned CVE-2026-102556 among others. A high-severity fix is available in version 2.74.2-28.oe2203sp4.