openSUSE-SU-2026:22149-1
openSUSE-SU-2026:22149-1 · Security update for python-soupsieve
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFIER` / `VALUE` selector sub-patterns can lead to a DoS (bsc#1281120).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-soupsieve openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 2.6-160000.5.1
Update to 2.6-160000.5.1