{"id":"JLSEC-2026-1280","details":"A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the `skip_insight_whitespace()` function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.","modified":"2026-08-13T09:45:03.356770749Z","published":"2026-08-13T09:38:52.525Z","upstream":["CVE-2025-2784"],"database_specific":{"license":"CC-BY-4.0","sources":[{"html_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2784","database_specific":{"status":"Modified"},"id":"CVE-2025-2784","imported":"2026-08-12T15:24:40.453Z","modified":"2026-06-30T01:16:24.507Z","published":"2025-04-03T03:15:18.113Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-2784"}]},"references":[{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:21657"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:7505"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8126"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8132"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8139"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8140"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8252"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8480"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8481"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8482"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:8663"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2025:9179"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2025-2784"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354669"},{"type":"WEB","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/422"},{"type":"WEB","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/422"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html"}],"affected":[{"package":{"name":"Soup3_jll","ecosystem":"Julia","purl":"pkg:julia/Soup3_jll?uuid=fcd1aa73-243d-5665-acf3-2a5a4322c7a8"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1280.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}