Security
فارسی
All products

soupsieve

PyPI · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIERCVE-2026-126191 · GHSA-6655-6QJP-JX7X soupsieve PyPI High Fix reported
Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stackCVE-2026-126193 · GHSA-7G44-G9RC-X53W soupsieve PyPI Medium Fix reported
Soup Sieve: Polynomial-time denial of service in the descendant combinatorCVE-2026-126190 · GHSA-MMHR-3C5M-F64F soupsieve PyPI High Fix reported
Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic timeCVE-2026-126192 · GHSA-4J63-6C4X-WFG4 soupsieve PyPI Medium Fix reported
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsCVE-2026-86000 · GHSA-GJV8-XP57-G29CVersion ranges need review. soupsieveExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)CVE-2026-85999 · GHSA-J934-XHV5-FG8FVersion ranges need review. soupsieveExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector ParserCVE-2026-49477 · GHSA-836R-79RF-4M37Version ranges need review. soupsieveExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector ListsCVE-2026-49476 · GHSA-2WC2-FM75-P42XVersion ranges need review. soupsieveExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported