openSUSE 16 Security Update : python-soupsieve (openSUSE-SU-2026:22149-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22149-1 advisory. - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. - CVE-2026-86000:...

SUSE SLES16 Security Update : python-soupsieve (SUSE-SU-2026:24267-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24267-1 advisory. - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. -...

Security update for python-soupsieve (moderate)

openSUSE security update: security update for python-soupsieve ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22149-1 Rating: moderate References: bsc1281119 bsc1281120 Cross-References: CVE-2026-85999 CVE-2026-86000 CVSS scores: CVE-2026-85999 SUS...

SUSE-SU-2026:24267-1 Security update for python-soupsieve

This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. - CVE-2026-86000: quadratic complexity when running the IDENTIFIER / VALUE selector sub-patterns can lead to a...

OPENSUSE-SU-2026:22149-1 Security update for python-soupsieve

This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. - CVE-2026-86000: quadratic complexity when running the IDENTIFIER / VALUE selector sub-patterns can lead to a...

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Summarysoupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...

PYSEC-2026-4170 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Summary soupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...

khed (0.0.1) potentially affected by CVE-2026-85999 via soupsieve (1.6.2)

soupsieve PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - khed 0.0.1 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

khed (0.0.1) potentially affected by CVE-2026-86000 via soupsieve (1.6.2)

soupsieve PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - khed 0.0.1 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-85999 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

suruguya (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.9.0)

soupsieve PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - suruguya =0.0.1, =0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

suruguya (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-85999 via soupsieve (1.9.0)

soupsieve PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - suruguya =0.0.1, =0.0.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-85999 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-86000 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

cosmicdbsemantic (>=0.0.30, <=0.0.37), hackingtools (>=0.9.94, <=1.1.9) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.9.2)

soupsieve PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - cosmicdbsemantic =0.0.30, =0.9.94, =0.0.1, =0.0.3 - oam-sso 0.0.1 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

cosmicdbsemantic (>=0.0.30, <=0.0.37), hackingtools (>=0.9.94, <=1.1.9) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.9.2)

soupsieve PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - cosmicdbsemantic =0.0.30, =0.9.94, =0.0.1, =0.0.3 - oam-sso 0.0.1 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

vitamin-b (>=0.1.0, <=0.2.2) potentially affected by CVE-2026-86000 via soupsieve (1.9.3)

soupsieve PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - vitamin-b =0.1.0, =0.2.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...