CyberICT

CVE-2026-3634

Microsoft · Published March 21, 2026

CVSS v3.1

INFO
Patch availableGet patch

Description

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header. Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

Affected Products

  • cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0
  • azl3 libsoup 3.4.4-14 on Azure Linux 3.0
  • cbl2 libsoup 3.0.4-13 on CBL Mariner 2.0
  • azl3 libsoup 3.4.4-12 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L