Количество 8
Количество 8
GHSA-836r-79rf-4m37
Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser
CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4.
CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautifu ...
openSUSE-SU-2026:21342-1
Security update for python-soupsieve
SUSE-SU-2026:3240-1
Security update for python-soupsieve
SUSE-SU-2026:3239-1
Security update for python-soupsieve
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-836r-79rf-4m37 Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser | CVSS3: 7.5 | 1% Низкий | 28 дней назад |
 | CVE-2026-49477 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4. | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | CVE-2026-49477 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4. | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | CVE-2026-49477 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4. | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
| CVE-2026-49477 Soup Sieve is a CSS selector library designed to be used with Beautifu ... | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | openSUSE-SU-2026:21342-1 Security update for python-soupsieve | 23 дня назад | ||
| SUSE-SU-2026:3240-1 Security update for python-soupsieve | 13 дней назад | ||
| SUSE-SU-2026:3239-1 Security update for python-soupsieve | 13 дней назад |
Уязвимостей на страницу