PatchTheCVEsoup sieve vulnerabilities and fixes
Recent CVEs affecting soup sieve, with upgrade or downgrade steps. 2 tracked.
Also searched as: soupsieve.
soup sieve has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-07-14. Highest priority: CVE-2026-49476 (score 49/100).
- CVE-2026-49476 HIGH 7.5 UPGRADE Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4
- CVE-2026-49477 HIGH 7.5 UPGRADE Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4
FAQ
How do I fix soup sieve vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is soup sieve being exploited right now?
None of the tracked soup sieve CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which soup sieve CVE should I patch first?
CVE-2026-49476 currently ranks highest (49/100): Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.