rpm package
suse/jsoup&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3
pkg:rpm/suse/jsoup&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-36033 | — | < 1.15.3-150200.3.6.1 | 1.15.3-150200.3.6.1 | Aug 29, 2022 | jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau | ||
| CVE-2021-37714 | — | < 1.14.2-150200.3.3.1 | 1.14.2-150200.3.3.1 | Aug 18, 2021 | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefin |
- CVE-2022-36033Aug 29, 2022affected < 1.15.3-150200.3.6.1fixed 1.15.3-150200.3.6.1
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau
- CVE-2021-37714Aug 18, 2021affected < 1.14.2-150200.3.3.1fixed 1.14.2-150200.3.3.1
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefin