Vulnerabilities for soupsieve

First version without a known vulnerability: 2.8.4

Details

• GHSA-836r-79rf-4m372026-07-09

  Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

  Fixed in: 2.8.4

• GHSA-2wc2-fm75-p42x2026-07-09

  Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

  Fixed in: 2.8.4