Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0?arch=6
purl pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0?arch=6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4scr-ppqy-5ugf
Aliases:
CVE-2025-32907
libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header There are no reported fixed by versions.
VCID-e8ye-fsm9-2kcr
Aliases:
CVE-2025-4035
libsoup: Cookie domain validation bypass via uppercase characters in libsoup There are no reported fixed by versions.
VCID-jj7w-5tgz-4kcr
Aliases:
CVE-2025-32049
libsoup: Denial of Service attack to websocket server There are no reported fixed by versions.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:41:24.663319+00:00 RedHat Importer Affected by VCID-jj7w-5tgz-4kcr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32049.json 38.0.0
2026-04-01T13:40:55.777667+00:00 RedHat Importer Affected by VCID-4scr-ppqy-5ugf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32907.json 38.0.0
2026-04-01T13:40:41.291658+00:00 RedHat Importer Affected by VCID-e8ye-fsm9-2kcr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4035.json 38.0.0
2026-04-01T13:40:06.902991+00:00 RedHat Importer Affected by VCID-rd74-1427-eybf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4948.json 38.0.0