CVE-2026-126190

The Soup Sieve CSS selector library, used with Beautiful Soup 4 , is vulnerable to a Polynomial-time Denial of Service (DoS) . Prior to version 4.0 , the library repeatedly walks the same ancestors when matching descendant combinators. Processing deeply nested, attacker-influenced HTML or XML usi...