https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T05:47:07.186216+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-66339 CVE-2026-66339 — Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels 2026-10-02T05:47:07.187703+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.