soupsieve
PyPI8 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting soupsievepage 1 of 1
- CVE-2026-126190HIGHCVSS 7.5EG 7.5fixed in 4.0.02026-11-12
vulnerable: 0.4 ... 3.0.4 (61 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polyno…
- CVE-2026-126191HIGHCVSS 7.5EG 7.5fixed in 3.0.22026-11-12
vulnerable: 0.4 ... 3.0.1 (58 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 3.0, the CSS_ESCAPES and IDENTIFIER regular-expression subpatterns can backtrack exponentially on runs of ambiguous digit escapes in an attribute-name…
- CVE-2026-126192MEDIUMCVSS 6.3EG 6.3fixed in 2.10.02026-11-12
vulnerable: 0.4 ... 2.9.2 (55 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has() repeatedly scans each candidate element's follow…
- CVE-2026-126193MEDIUMCVSS 5.3EG 5.3fixed in 3.0.22026-11-12
vulnerable: 0.4 ... 3.0.1 (58 versions)
Soup Sieve is a CSS selector library for Beautiful Soup. From 0.4 until 3.0, deeply nested CSS pseudo-class selectors can cause recursive parsing to exceed Python’s recursion limit and raise RecursionError . Applications accepting unt…
- CVE-2026-49476HIGHCVSS 7.5EG 7.5fixed in 2.8.42026-07-09
vulnerable: 0.4 ... 2.8.3 (51 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who c…
- CVE-2026-49477HIGHCVSS 7.5EG 7.5fixed in 2.8.42026-07-09
vulnerable: 0.4 ... 2.8.3 (51 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selecto…
- CVE-2026-85999MEDIUMCVSS 5.3EG 5.3fixed in 2.9.02026-09-17
vulnerable: 0.4 ... 2.8.4 (52 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py trims the raw selector with RE_WS_END, an end-anchored WSC whitespace-and-comment expression used wi…
- CVE-2026-86000MEDIUMCVSS 5.3EG 5.3fixed in 2.9.02026-09-17
vulnerable: 0.4 ... 2.8.4 (52 versions)
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src/soupsieve/css_parser.py defines IDENTIFIER with adjacent quantified groups over overlapping character classes, and VAL…
Check whether soupsieve is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for soupsieve CVEs against the assets you own.
Book a Demo →