CVE-2026-6324

The record

A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup backend server. Successful exploitation can allow an attacker to bypass security controls, poison web caches, or gain unauthorized access.

Affected packages

Related vulnerabilities

• CVE-2026-112212 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before… CWE-444
• CVE-2026-111750 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-444
• CVE-2026-88829 A flaw was found in BusyBox httpd's reverse proxy feature. CWE-444
• CVE-2026-94439 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns… CWE-444
• CVE-2026-78660 Historically, we have been rather lax about malformed framing-related headers in our… CWE-444
• CVE-2026-56866 When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it… CWE-444
• CVE-2026-85078 Sanic is an opensource python web server/framework. CWE-444
• CVE-2026-81356 Inconsistent interpretation of http requests ('http request/response smuggling') in… CWE-444