PT-2026-105915

Summary Before tokenizing, selector iter trims leading/trailing whitespace and comments by running two regexes over the whole raw selector with .search. The trailing one, RE WS END = re.compiler'WSC$', is anchored only at the end $, not the start. Because .search retries the pattern at every...

PT-2026-94386

Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.9 Description An issue exists in the selector iter function within src/soupsieve/css parser.py where the raw selector is trimmed using RE WS END. Because this regular expression is anchored only at the end and us...