CVE-2026-49477 | facelessuser soupsieve up to 2.8.3 CSS selector parser soupsieve/css_parser.py compile attribute incorrect regex

July 15, 2026 Yanac

A vulnerability marked as problematic has been reported in facelessuser soupsieve up to 2.8.3. This affects the function compile of the file soupsieve/css_parser.py of the component CSS selector parser. This manipulation of the argument attribute causes incorrect regular expression.

This vulnerability is tracked as CVE-2026-49477. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More