{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libsoup3","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NQMWRHC6T0YNGMTCJ58RVS","modified_at":"2026-10-31T16:04:23.786095995Z","published_at":"2026-01-27T10:15:48.597Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-1467","https://security-tracker.debian.org/tracker/CVE-2026-1467"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-1467#Debian:13/libsoup3","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-1467"}],"summary":"A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles"}