GHSA-f4vp-qjpg-x8wq

GHSA-f4vp-qjpg-x8wq PUBLISHED CVSS 7.5 HIGH

Record from GitHub Advisory Database · Published April 14, 2025

A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Timeline

Apr 14, 2025 CVE Published
Apr 10, 2026 Distribution Patch (13 in total, the first dated here)
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-f4vp-qjpg-x8wq
vulnetix vdb fixes GHSA-f4vp-qjpg-x8wq

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-f4vp-qjpg-x8wq/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →