Skip to content

Update dependency soupsieve to v2.8.4 - #13

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/soupsieve-2.x
Open

mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/soupsieve-2.x

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Aug 26, 2026 •

Copy link
Copy Markdown

This PR contains the following updates:

Package Update Change
soupsieve minor ==2.7 → ==2.8.4

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 7.5 CVE-2026-49476
High High 7.5 CVE-2026-49477

Release Notes

facelessuser/soupsieve (soupsieve)

v2.8.4

Compare Source

2.8.4

  • FIX: Fix another inefficient attribute pattern (@​mauriceng98).
  • FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@​mauriceng98).

v2.8.3

Compare Source

2.8.3

  • FIX: Fix inefficient attribute pattern.

v2.8.2

Compare Source

2.8.2

  • FIX: Ensure custom selectors or namespace dictionaries reject non-string keys (@​mundanevision20).
  • FIX: Fix handling of :in-range and :out-of-range with end of year weeks (@​mundanevision20).
  • FIX: Fix a potential infinite loop in the pretty printing debug function (@​mundanevision20).

v2.8.1

Compare Source

2.8.1

  • FIX: Changes in tests to accommodate latest Python HTML parser changes.

v2.8

Compare Source

2.8

  • NEW: Drop support for Python 3.8.
  • NEW: Add support for Python 3.14.
  • NEW: Deploy with PyPI's "Trusted Publisher".

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants