Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SoupServer may let attackers send hidden requests
published 5 months ago
Summary
SoupServer can be tricked by specially crafted web traffic to keep a connection open when it should close it. This lets an attacker slip extra requests into the same connection, which can cause the server to act on unintended commands or become unavailable. Update SoupServer to the latest version or apply the vendor's patch to stop this behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | libsoup3 | All versions |
Original advisory text
ECHO-0d17-9796-549f
References
Timeline
Published1 Jun 2026
Updated1 Jun 2026
First seen1 Jun 2026
Sources
ECHO-0d17-9796-549f · OSV
Track software like this
Free during beta