What’s Vulnerable › Products

facelessuser soupsieve vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your facelessuser soupsieve version is affected

Latest facelessuser soupsieve vulnerabilities

• CVE-2026-86000 — Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns (CVSS 5.3)
• CVE-2026-85999 — Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors) (CVSS 5.3)
• CVE-2026-49477 — Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser (CVSS 7.5)
• CVE-2026-49476 — Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve (CVSS 7.5)