CyberICT

CVE-2026-3633

Microsoft · Published March 21, 2026

CVSS v3.1

INFO
Patch availableGet patch

Description

Libsoup: libsoup: header and http request injection via crlf injection. Libsoup: libsoup: header and http request injection via crlf injection

Affected Products

  • azl3 libsoup 3.4.4-12 on Azure Linux 3.0
  • cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0
  • cbl2 libsoup 3.0.4-13 on CBL Mariner 2.0
  • azl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P