Maven package
org.jsoup/jsoup
pkg:maven/org.jsoup/jsoup
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-36033 | — | < 1.15.3 | 1.15.3 | Aug 29, 2022 | jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau | ||
| CVE-2021-37714 | — | < 1.14.2 | 1.14.2 | Aug 18, 2021 | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefin | ||
| CVE-2015-6748 | Med | 6.1 | >= 1.6.0, < 1.8.3 | 1.8.3 | Sep 25, 2017 | Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3. |
- CVE-2022-36033Aug 29, 2022affected < 1.15.3fixed 1.15.3
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau
- CVE-2021-37714Aug 18, 2021affected < 1.14.2fixed 1.14.2
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefin
- affected >= 1.6.0, < 1.8.3fixed 1.8.3
Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.