{"id":"CVE-2026-49476","title":"python-soupsieve: Soupsieve: Denial of Service via crafted CSS selector string (CVE-2026-49476)","summary":"A flaw was found in soupsieve, a CSS selector library used with Beautiful Soup 4. This vulnerability allows a remote attacker to cause a denial of service (DoS) by supplying a specially crafted CSS selector string. The parser allocates unb…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-770","CWE-400"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","affected":["exploit_intelligence","lightspeed_core","migration_toolkit_for_applications 8","openshift_lightspeed","ansible_automation_platform 2","openshift_ai_rhoai","openshift_container_platform 4","openshift_virtualization 4","openstack_platform 17.1","quay 3","satellite 6","hardened_images","openshift_ai 3.4"],"patched":["hardened_images","openshift_ai 3.4"],"published":"2026-07-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:03:37+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49476.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49476.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-49476"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500715"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49476"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49476"},{"url":"https://github.com/facelessuser/soupsieve/commit/28108ab805818c832d9568142a99844fd95a0d39"},{"url":"https://github.com/facelessuser/soupsieve/releases/tag/2.8.4"},{"url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-2wc2-fm75-p42x"},{"url":"https://access.redhat.com/errata/RHSA-2026:34119"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"url":"https://github.com/facelessuser/soupsieve"},{"url":"https://github.com/advisories/GHSA-2wc2-fm75-p42x"}],"tags":["csaf","vex","red-hat","osv","pip","ghsa"],"epss":0.00644,"epssPercentile":0.50658,"aliases":["GHSA-2wc2-fm75-p42x","PYSEC-2026-3071"],"ecosystem":"pip","scores":{"vendor":5.9,"osv":7.5},"ingestedAt":"2026-07-09T13:51:05.196Z","slug":"CVE-2026-49476","body":"## Overview\n\nA flaw was found in soupsieve, a CSS selector library used with Beautiful Soup 4. This vulnerability allows a remote attacker to cause a denial of service (DoS) by supplying a specially crafted CSS selector string. The parser allocates unbounded memory when compiling large, comma-separated selector lists, leading to excessive memory consumption and system instability.\n\n## Vendor advisories\n\n- **RHSA-2026:34119** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:34119)\n- **RHSA-2026:60520** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:60520)\n- **Red Hat VEX** · Important · affected: Exploit Intelligence, Lightspeed Core, Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), … · no fix planned: Exploit Intelligence, Lightspeed Core, Migration Toolkit for Applications 8, OpenShift Lightspeed, … · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49476.json)\n\n**python-soupsieve: Soupsieve: Denial of Service via crafted CSS selector string** — rated Important by Red Hat. Released 2026-07-14, updated 2026-10-15.\n\nAffected:\n\n- Exploit Intelligence\n- Lightspeed Core\n- Migration Toolkit for Applications 8\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 2\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift Virtualization 4\n- Red Hat OpenStack Platform 17.1\n- Red Hat Quay 3\n- Red Hat Satellite 6\n\nFixed:\n\n- Red Hat Hardened Images\n- Red Hat OpenShift AI 3.4\n\nNo fix planned:\n\n- Exploit Intelligence\n- Lightspeed Core\n- Migration Toolkit for Applications 8\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 2\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift Virtualization 4\n- Red Hat OpenStack Platform 17.1\n- Red Hat Quay 3\n- Red Hat Satellite 6\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI 3.4\n- Red Hat Hardened Images\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:34119\nFor Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/ https://access.redhat.com/errata/RHSA-2026:60520\n\nWorkarounds / mitigations:\n\n- There is no mitigation for this flaw other than updating the soupsieve package when upstream patches are available. The impact is limited to availability (denial of service) — an attacker cannot access or modify data through this vulnerability. Applications that do not process untrusted CSS selector strings are at reduced risk.\n\n## Package advisory (CVE-2026-49476)\n\nAffected packages:\n\n- `soupsieve < 2.8.4`\n\nPatched in:\n\n- `soupsieve 2.8.4`\n\nSource: https://osv.dev/vulnerability/GHSA-2wc2-fm75-p42x","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":218449,"id":"CVE-2026-49476","ts":1791533748464,"field":"cvss","old":"7.5","new":"5.9"},{"seq":218448,"id":"CVE-2026-49476","ts":1791533748464,"field":"severity","old":"high","new":"medium"}]}