{"action":"Upgrade org.jsoup:jsoup to 1.15.3 or later.","affected":[{"fixed":"1.15.3","introduced":"0"}],"component":"org.jsoup:jsoup","cve_ids":["CVE-2022-36033"],"ecosystem":"Maven","epss":0.01643,"exploited":false,"fixed_versions":["1.15.3"],"ghsa_id":"GHSA-gp7f-rwcx-9369","id":"tcs_01M5N8YK2AQ0P33K8DC5Z3W7JV","modified_at":"2026-09-10T03:49:45.687546905Z","published_at":"2022-09-01T22:14:57Z","references":["https://osv.dev/vulnerability/GHSA-gp7f-rwcx-9369","https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369","https://nvd.nist.gov/vuln/detail/CVE-2022-36033","https://github.com/jhy/jsoup","https://github.com/jhy/jsoup/releases/tag/jsoup-1.15.3","https://jsoup.org/news/release-1.15.3","https://security.netapp.com/advisory/ntap-20221104-0006"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-gp7f-rwcx-9369","url":"https://osv.dev/vulnerability/GHSA-gp7f-rwcx-9369"}],"summary":"jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled"}