Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libsoup@2.62.3-1.el8_2?arch=5
purl pkg:rpm/redhat/libsoup@2.62.3-1.el8_2?arch=5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content There are no reported fixed by versions.
VCID-jj7w-5tgz-4kcr
Aliases:
CVE-2025-32049
libsoup: Denial of Service attack to websocket server There are no reported fixed by versions.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup There are no reported fixed by versions.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:41:39.792615+00:00 RedHat Importer Affected by VCID-6skx-v6sg-53gq https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-2784.json 38.0.0
2026-04-01T13:41:24.601975+00:00 RedHat Importer Affected by VCID-jj7w-5tgz-4kcr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32049.json 38.0.0
2026-04-01T13:40:56.804468+00:00 RedHat Importer Affected by VCID-yx68-81fu-ffar https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32914.json 38.0.0
2026-04-01T13:40:06.848278+00:00 RedHat Importer Affected by VCID-rd74-1427-eybf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4948.json 38.0.0