ECHO-9de4-e5ae-bd39

See a problem?

Import Source

https://advisory.echohq.com/osv/ECHO-9de4-e5ae-bd39.json

JSON Data

https://api.osv.dev/v1/vulns/ECHO-9de4-e5ae-bd39

Upstream

CVE-2026-3099

Withdrawn

2026-05-20T08:41:34Z

Published

2026-05-20T08:41:34Z

Modified

2026-09-15T03:33:44Z

Summary

Disputed by upstream. Stateless digest auth is by design; nonce tracking would be a feature addition. https://gitlab.gnome.org/GNOME/libsoup/-/issues/495

Details

References

https://advisory.echohq.com/cve/CVE-2026-3099
https://nvd.nist.gov/vuln/detail/CVE-2026-3099
https://access.redhat.com/security/cve/CVE-2026-3099
https://bugzilla.redhat.com/show_bug.cgi?id=2442232
https://gitlab.gnome.org/GNOME/libsoup/-/issues/495

Affected packages

Echo / libsoup3

Package

Name: libsoup3
Purl: pkg:deb/echo/libsoup3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6.6-1+e3

Database specific

source

"https://advisory.echohq.com/osv/ECHO-9de4-e5ae-bd39.json"