facelessuser/soupsieve Security Advisories | GitStock

medium2026-09-17

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

GHSA-gjv8-xp57-g29c · CVE-2026-86000

medium2026-09-17

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

GHSA-j934-xhv5-fg8f · CVE-2026-85999

high2026-07-09

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

GHSA-836r-79rf-4m37 · CVE-2026-49477

high2026-07-09

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

GHSA-2wc2-fm75-p42x · CVE-2026-49476