Количество 8
Количество 8
GHSA-2wc2-fm75-p42x
Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49476
Soup Sieve is a CSS selector library designed to be used with Beautifu ...
openSUSE-SU-2026:21342-1
Security update for python-soupsieve
SUSE-SU-2026:3240-1
Security update for python-soupsieve
SUSE-SU-2026:3239-1
Security update for python-soupsieve
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2wc2-fm75-p42x Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists | CVSS3: 7.5 | 1% Низкий | 28 дней назад |
 | CVE-2026-49476 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4. | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | CVE-2026-49476 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4. | CVSS3: 5.9 | 1% Низкий | 23 дня назад |
 | CVE-2026-49476 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4. | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
| CVE-2026-49476 Soup Sieve is a CSS selector library designed to be used with Beautifu ... | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | openSUSE-SU-2026:21342-1 Security update for python-soupsieve | 23 дня назад | ||
| SUSE-SU-2026:3240-1 Security update for python-soupsieve | 13 дней назад | ||
| SUSE-SU-2026:3239-1 Security update for python-soupsieve | 13 дней назад |
Уязвимостей на страницу