Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Linux python-rpds-py alert: CVE-2026-49477 (CVSS 7.5) Attackers could disrupt service or cause a denial of service. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-49477 #Linux #pythonrpdspy #CyberSecurity #CVE
Post summary
The alert focuses on a newly disclosed CVE-2026-49477 in python-rpds-py, urging users to upgrade to the vendor‑provided fix, with basic impact and CVSS details given.
@pydantic Security → Update soupsieve to patch ReDoS CVE-2026-49477 This release favors stability over features. Teams using advanced schema or timeout config will notice fewer edge-case errors.
Post summary
Pydantic announces it is updating soupsieve to patch the ReDoS vulnerability CVE‑2026‑49477, emphasizing a stability‑focused release that reduces edge‑case errors for users of advanced schemas.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | facelessuser | soup_sieve | - | beautiful_soup | - |