CVE-2026-126191

The Soup Sieve CSS selector library, used with Beautiful Soup 4 , is vulnerable to exponential regular-expression backtracking in versions prior to 3.0 . The vulnerability exists because the CSS_ESCAPES and IDENTIFIER subpatterns can backtrack exponentially when processing ambiguous digit escapes...