GNOME libsoup
- CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
- CVE-2024-52531 GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_me 0.7%