Known vulnerabilities in jsoup
Vendor:
Jonathan Hedley
Software:
jsoup
Software CPE:
cpe:2.3:a:jhy:jsoup:*:*:*:*:*:*:*:*
Website:
https://jhy.io/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.23.2
1.23.1
1.22.2
1.22.1
1.21.2
1.21.1
1.20.1
1.19.1
1.18.3
1.18.2
1.18.1
1.17.2
1.17.1
1.16.2
1.16.1
1.15.4
1.15.3
1.15.2
1.15.1
1.14.3
1.14.2
1.14.1
1.13.1
1.12.2
1.12.1
1.11.3
1.11.2
1.11.1
1.10.3
1.10.2
1.10.1
1.9.2
1.9.1
1.8.3
1.8.2
1.8.1
1.7.3
1.7.2
1.7.1
1.6.3
1.6.2
1.6.1
1.6.0
1.5.2
1.5.1
1.4.1
1.3.3
1.3.2
1.3.1
1.2.3
1.2.2
1.2.1
1.1.1
0.3.1
0.2.2
0.2.1
0.1.2
0.1.1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-71497 |
CWE-79 | Medium | 1.23.1 | 01.08.2026 |
SB2026080107 SB2026091561 |
||
| #VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36033 |
CWE-79 | Low | 1.15.3 | 25.08.2022 |
SB2022082508 SB2022101893 SB2022111644 and 44 more |
||
| #VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-37714 |
CWE-835 | Medium | 1.14.2 | 16.11.2021 |
SB2021111606 SB2021111715 SB2022012314 and 24 more |
||
| #VU31409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-6748 |
CWE-79 | Low | 1.8.3 | 25.09.2017 |
SB2017092503 SB2023012311 |