CVE-2026-126191 ← All CVEs & products

Posts about CVE-2026-126191

Find posts on this blog by CVE ID and product topic.

1 post

13 products

An index of this blog’s posts. Product labels describe topics discussed; consult the original advisory for affected versions.

1 post

High Nov 13, 2026

Soup Sieve ReDoS vulnerability CVE-2026-126191: upgrade to a patched version

Soup Sieve has a ReDoS flaw when compiling certain CSS selectors, potentially hanging workers if applications process user-supplied selectors. Versions 2.10 and earlier are affected; upgrade to 3.0.2 or later, and do not use 3.0.0, which was withdrawn from PyPI.

CVE-2026-126191