The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
- https://usn.ubuntu.com/3701-1/
No PoCs found on GitHub currently.