Maven/org.jsoup:jsoup CVE-2026-71497: medium 4.7, EPSS 0.30%
jsoup: Cleaner may expose markup with custom raw-text elements
Action: Upgrade org.jsoup:jsoup to 1.23.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.14.3 | 1.23.1 | - |
Fixed versions
| 1.23.1 |
Sources
- osv: GHSA-pmhh-3w7g-xqp8
- https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8
- https://github.com/jhy/jsoup/issues/2538
- https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70
- https://github.com/jhy/jsoup
- https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.1
CVE-2026-71497 · published · modified · JSON