Flaw in libsoup allows an attacker to perform HTTP header injection and response splitting. By controlling the Content-Type header value, an attacker can inject arbitrary header-value pairs due to improper input sanitization in the soup_message_headers_set_content_type() function.