Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jsoup:jsoup

5 known vulnerabilities (2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high, 2 medium
Dependents
2,036
Registry
Maven Central

Advisories 5

  • jsoup Uncontrolled Resource Consumption in XmlTreeBuilder

    Affected: fixed in 1.23.2.

  • CVE-2026-71497Medium 4.7

    jsoup: Cleaner may expose markup with custom raw-text elements

    Affected: from 1.14.3, fixed in 1.23.1.

  • CVE-2022-36033Medium 6.1

    jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

    Affected: fixed in 1.15.3.

  • Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

    Affected: fixed in 1.14.2.

  • Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

    Affected: from 1.6.0, fixed in 1.8.3.