Soup Sieve (< 4.0)

Soup Sieve versions prior to 4.0 are vulnerable to an algorithmic complexity denial-of-service, where processing deeply nested, untrusted HTML or XML documents leads to excessive resource consumption and worker process exhaustion.