CVE-2026-126193
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
71/100
Published: 2026-11-12
Modified: 2026-11-12
First seen: 2026-11-12
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
Low
Description
Soup Sieve is a CSS selector library for Beautiful Soup. From 0.4 until 3.0, deeply nested CSS pseudo-class selectors can cause recursive parsing to exceed Python’s recursion limit and raise RecursionError . Applications accepting untrusted selectors may experience failure of the affected request or task if the exception is not handled. The demonstrated behavior is recoverable and does not establish an interpreter crash or persistent service-wide denial of service. This vulnerability is fixed in version 3.0.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| facelessuser | soupsieve | >= 0.4, < 3.0 |