EUVD-2026-124557

Soup Sieve: General sibling combinator inside :has matches untrusted HTML in quadratic time...

GHSA-4J63-6C4X-WFG4 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Summary Matching a selector that puts a general-sibling combinator inside :has, such as div:hasa b, against untrusted HTML runs in On² time in the number of sibling elements. A single small document with a few thousand siblings ties the process up for a minute of CPU, so an application that runs ...

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Summary Matching a selector that puts a general-sibling combinator inside :has, such as div:hasa b, against untrusted HTML runs in On² time in the number of sibling elements. A single small document with a few thousand siblings ties the process up for a minute of CPU, so an application that runs ...

UBUNTU-CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126189

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0.1, Soup Sieve repeatedly searches descendant subtrees for each candidate evaluated by :has and repeatedly reevaluates a parent containing :has ... for each child, causing quadratic matching on deeply nest...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192

The Soup Sieve CSS selector library (versions prior to 2.10 ) is vulnerable to an algorithmic complexity issue. When processing attacker-controlled HTML, a developer-authored selector that places a general sibling combinator inside a :has() pseudo-class (e.g., div:has(a ~ b)) causes the library t...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126189

The Soup Sieve CSS selector library (used with Beautiful Soup 4 ) is vulnerable to a quadratic-time denial of service (DoS) . Prior to version 4.0.1 , the library repeatedly searches descendant subtrees for candidates evaluated by :has() and reevaluates parents containing :has(> ...) for each ...

CVE-2026-126189 Soup Sieve: Quadratic-time denial of service when matching `:has()`

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0.1, Soup Sieve repeatedly searches descendant subtrees for each candidate evaluated by :has and repeatedly reevaluates a parent containing :has ... for each child, causing quadratic matching on deeply nest...

PT-2026-145886

Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.10 Description Matching a developer-authored selector that places the general sibling combinator inside the :has pseudo-class repeatedly scans each candidate element's following siblings when the right-hand side ...

CVE-2026-126192: facelessuser soupsieve: Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

Astra Linux – vulnerability in libgit2

LibGit2 is a portable C implementation of Git’s core methods, provided as a linkable library with a robust API. It enables developers to integrate Git functionality into their applications. However, using specially crafted inputs to gitindexadd can result in heap corruption, which may be exploite...

PT-2026-114392

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SELinux component where the avc has perm noaudit function fails to populate the access decision buffer @avd when an empty requested permission set is encountered...

CVE-2026-109758

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installe...

CVE-2026-109305

Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...

CVE-2026-109305 Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every

Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...

CVE-2026-109305 Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every

Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...