CVE-2026-2708

Name of the Vulnerable Software and Affected Versions libsoup versions 2.4.1-2.74.3 through 2.4.1-2.74.3-17.1 libsoup versions 3.0.0-3.6.6 through 3.0.0-3.6.6-1.1

Description The libsoup library contains flaws related to HTTP/1 request smuggling. Specifically, the soup headers parse() function improperly handles Content-Length (CL.CL) and Transfer-Encoding (TE+CL) header combinations, allowing for request smuggling primitives to be accepted.

Recommendations Update libsoup to version 2.4.1-2.74.3-17.1 or later. Update libsoup to version 3.0.0-3.6.6-1.1 or later.