https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:15:40.794339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4035 CVE-2025-4035 — Libsoup: cookie domain validation bypass via uppercase characters in libsoup 2026-10-08T21:15:40.823641+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.

 https://cve.radiocsirt.org/vuln/rhsa-2025:8128 RHSA-2025:8128 — Red Hat Security Advisory: libsoup3 security update 2026-10-08T21:15:40.823713+00:00

libsoup: Cookie domain validation bypass via uppercase characters in libsoup libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup libsoup: Denial of Service attack to websocket server libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header