CVE-2025-14523 — A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, — CVE Database · The Intelligence Room