vitamin-b (>=0.1.0, <=0.2.2) potentially affected by CVE-2026-86000 via soupsieve (1.9.3)

soupsieve PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - vitamin-b =0.1.0, =0.2.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

khed (0.0.1) potentially affected by CVE-2026-86000 via soupsieve (1.6.2)

soupsieve PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - khed 0.0.1 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

cosmicdbsemantic (>=0.0.30, <=0.0.37), hackingtools (>=0.9.94, <=1.1.9) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.9.2)

soupsieve PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - cosmicdbsemantic =0.0.30, =0.9.94, =0.0.1, =0.0.3 - oam-sso 0.0.1 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

spotichart (>=0.6.0, <=1.0.0), watertools (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-86000 via soupsieve (1.9.4)

soupsieve PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - spotichart =0.6.0, =0.0.2, =0.0.3 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-86000 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-86000 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-86000 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

suruguya (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-86000 via soupsieve (1.9.0)

soupsieve PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - suruguya =0.0.1, =0.0.2 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-86000 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-86000 Source advisory: OSV:PYSEC-2026-4170...

PYSEC-2026-4170 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Summary soupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Summarysoupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...

suruguya (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-85999 via soupsieve (1.9.0)

soupsieve PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - suruguya =0.0.1, =0.0.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

advans-erp-checker (>=0.1.0, <=0.1.1), is-wordpress (0.0.2) potentially affected by CVE-2026-85999 via soupsieve (1.7.3)

soupsieve PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - advans-erp-checker =0.1.0, =0.1.1 - is-wordpress 0.0.2 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

khed (0.0.1) potentially affected by CVE-2026-85999 via soupsieve (1.6.2)

soupsieve PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - khed 0.0.1 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

cosmicdbsemantic (>=0.0.30, <=0.0.37), hackingtools (>=0.9.94, <=1.1.9) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.9.2)

soupsieve PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - cosmicdbsemantic =0.0.30, =0.9.94, =0.0.1, =0.0.3 - oam-sso 0.0.1 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +667 more potentially affected by CVE-2026-85999 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

boj2md (>=0.0.1, <=0.0.2), desktopscoreviewer (>=1.0.2, <=1.0.3) +3 more potentially affected by CVE-2026-85999 via soupsieve (1.9.1)

soupsieve PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - boj2md =0.0.1, =1.0.2, =0.2.0, =1.3.7, =1.4.4 - subtidal 1.0.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...