Threats tagged 'brew-mcp-atlassian-cve-2026-49476'

A memory exhaustion vulnerability exists in soupsieve, the CSS selector engine used by Beautiful Soup 4, due to unbounded memory allocation when compiling large comma-separated selector lists. An attacker can supply a crafted CSS selector string to soupsieve.compile() or Beautiful Soup's .select()/.select_one() methods, causing the application to allocate hundreds of megabytes of heap memory from a relatively small input, leading to denial of service via memory exhaustion. This affects versions >=0.11.9 and <0.21.1_8 of soupsieve. A fix is available in version 0.21.1_8.