Threats tagged 'brew-flexget-cve-2026-49477'

A Regular Expression Denial of Service (ReDoS) vulnerability exists in soupsieve's CSS selector parser due to a regex pattern that suffers from catastrophic backtracking when processing attribute selectors with unterminated quoted values. This can cause CPU exhaustion and thread blocking with a payload as small as 300 bytes, leading to significant processing delays. The issue affects applications that compile untrusted CSS selectors using soupsieve or Beautiful Soup's select methods. A fix is available in version 3.19.22.