Kona Arctic

**Name of the Vulnerable Software and Affected Versions** libsoup (affected versions not specified) **Description** A security issue exists in libsoup where sensitive session cookies are transmitted in cleartext when establishing HTTPS tunnels through a configured HTTP proxy. This occurs within the initial HTTP CONNECT request, potentially allowing a network-positioned attacker or a malicious HTTP proxy to intercept these cookies. Successful interception could lead to session hijacking or user impersonation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.