Threats tagged 'brew-aqtinstall-cve-2026-49476'

A memory exhaustion vulnerability exists in soupsieve's CSS selector parser used by Beautiful Soup 4. The parser allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker to cause high memory usage and denial of service by supplying crafted CSS selectors. This affects applications that use soupsieve.compile() or Beautiful Soup's .select()/.select_one() with user-supplied selectors. The issue is fixed in version 3.3.0_9.