From ab7b028780534d0a7e1e7ace81e268150dd487de Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Wirtel?= Date: Thu, 24 Sep 2026 07:51:36 +0200 Subject: [PATCH] fix(deps): upgrade soupsieve to 2.10 for security fixes Resolves multiple high/medium severity Dependabot alerts: polynomial ReDoS in the IDENTIFIER/VALUE selector sub-patterns and in the whitespace/comment trimming regex, memory exhaustion via large comma-separated selector lists, and a general ReDoS in the selector parser. GHSA-gjv8-xp57-g29c, GHSA-j934-xhv5-fg8f, GHSA-2wc2-fm75-p42x, GHSA-836r-79rf-4m37 Co-Authored-By: Claude Sonnet 5 --- requirements/dev.txt | 2 +- requirements/main.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/dev.txt b/requirements/dev.txt index 635bafe..3a0e78d 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -185,7 +185,7 @@ sortedcontainers==2.4.0 # via # cyclonedx-python-lib # fakeredis -soupsieve==2.8.3 +soupsieve==2.10 # via # -c requirements/main.txt # beautifulsoup4 diff --git a/requirements/main.txt b/requirements/main.txt index 1ac1124..09c799c 100644 --- a/requirements/main.txt +++ b/requirements/main.txt @@ -155,7 +155,7 @@ s3transfer==0.18.0 # via boto3 six==1.17.0 # via python-dateutil -soupsieve==2.8.3 +soupsieve==2.10 # via beautifulsoup4 sqlparse==0.6.0 # via django