Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Patched Functions
Debian
Libsoup3

debian/libsoup3: Functions Patched by CVE Fixes

c

#381 of 500 repositories

debian/libsoup3

Functions and files changed by CVE fixes in this repository.

Latest located fix May 21, 2025

15

CVE fixes located

Published CVEs

5

Functions patched

Distinct function sites

8

Files patched

Distinct source files

2025

Years covered

By CVE publication date

Overview

15 published CVEs have a fix traced to functions in debian/libsoup3, the earliest published in 2025. Those fixes changed 5 distinct functions across 8 files, in 37 patch hunks.

Among the 500 repositories tracked here, debian/libsoup3 ranks #381 by the number of CVEs with a located fix.

On this page

Overview
Most patched functions
Most patched files
Fix size
Latest CVEs
Other repositories
FAQ
References

Most patched functions

Functions in debian/libsoup3 changed by the most CVE fixes.

1parse_timelibsoup/soup-date-utils.c1 CVEs · 1 patches2025
2parse_yearlibsoup/soup-date-utils.c1 CVEs · 1 patches2025
3strcmplibsoup/soup-date-utils.c1 CVEs · 1 patches2025
4strcmplibsoup/auth/soup-auth-digest.c1 CVEs · 1 patches2025
5g_ascii_isdigitlibsoup/soup-headers.c1 CVEs · 1 patches2025

Most patched files

Files in debian/libsoup3 changed by the most CVE fixes.

1libsoup/auth/soup-auth-digest.c3 CVEs · 1 functions
2libsoup/soup-multipart.c3 CVEs · 0 functions
3libsoup/soup-headers.c2 CVEs · 1 functions
4libsoup/content-sniffer/soup-content-sniffer.c2 CVEs · 0 functions
5libsoup/soup-message-headers.c2 CVEs · 0 functions
6libsoup/soup-date-utils.c1 CVEs · 3 functions
7libsoup/server/http2/soup-server-message-io-http2.c1 CVEs · 0 functions
8libsoup/soup-session.c1 CVEs · 0 functions

Fix size

How much code a CVE fix in debian/libsoup3 changes, with backports counted once.

6

Median lines changed

Added plus removed, per CVE

87%

Fixes of 20 lines or fewer

Share of CVE fixes

87%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in debian/libsoup3, and the functions each fix changed.

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c
CVE-2025-4969
Medium · CVSS 6.5
EPSS 0.9%2025-05-21
Libsoup: integer overflow in cookie expiration date handling in libsoup
CVE-2025-4945strcmp parse_time parse_year
Low · CVSS 3.7
EPSS 0.7%2025-05-19
Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup
CVE-2025-4948
High · CVSS 7.5
EPSS 0.8%2025-05-19
Libsoup: null pointer dereference in libsoup may lead to denial of service
CVE-2025-4476strcmp
Medium · CVSS 4.3
EPSS 0.4%2025-05-16
Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server
CVE-2025-46421
Medium · CVSS 6.8
EPSS 0.6%2025-04-24
Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
CVE-2025-46420
Medium · CVSS 6.5
EPSS 0.6%2025-04-24
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
CVE-2025-32911
Critical · CVSS 9.0
EPSS 0.9%2025-04-15
Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
CVE-2025-32914
High · CVSS 7.4
EPSS 0.8%2025-04-14
Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication
CVE-2025-32912
Medium · CVSS 6.5
EPSS 0.5%2025-04-14
Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication
CVE-2025-32910
Medium · CVSS 6.5
EPSS 0.5%2025-04-14
Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
CVE-2025-32909
Medium · CVSS 5.3
EPSS 0.5%2025-04-14
Libsoup: denial of service on libsoup through http/2 server
CVE-2025-32908
High · CVSS 7.5
EPSS 0.6%2025-04-14

Get an alert for each new debian/libsoup3 CVE, with the patched functions and AI-written analysis.

Monitor libsoup3 CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

0xJacky/nginx-ui15 CVEs apache/mynewt-nimble15 CVEs cubecart/v615 CVEs debian/busybox15 CVEs debian/zziplib15 CVEs decolua/9router15 CVEs DSpace/DSpace15 CVEs ericcornelissen/shescape15 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in debian/libsoup3.

How many CVEs have a located fix in debian/libsoup3?: 15 published CVEs have a fix traced to functions in debian/libsoup3, touching 5 functions across 8 files.
Which function in debian/libsoup3 has been patched by the most CVEs?: parse_time in libsoup/soup-date-utils.c has been changed by 1 CVE fixes, from 2025 to 2025.
How large is a typical CVE fix in debian/libsoup3?: The median fix changes 6 lines. 87% of fixes change 20 lines or fewer, and 87% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

debian/libsoup3 on GitHub (opens in a new tab)
Patched functions directory
CWE directory: the weakness types behind these fixes

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/libsoup3 CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing