Soup Sieve vulnerabilities

2 known vulnerabilities in Soup Sieve from Facelessuser. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  soupsieve: Uncontrolled Resource Consumption

  CVE-2026-49477Jul 14, 2026Facelessuser

  Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminate

• 7.5 High severity

  soupsieve: Uncontrolled Resource Consumption

  CVE-2026-49476Jul 14, 2026Facelessuser

  Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted s