A memory exhaustion vulnerability exists in soupsieve's CSS selector parser used by Beautiful Soup 4. The parser allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker to cause denial of service by supplying a crafted CSS selector string. A 500 KB input can cause approximately 244 MB of heap memory allocation, leading to potential out-of-memory conditions or process termination.