jsoup vulnerabilities

CVEs whose affected-version data names the jsoup package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2021-37714High· 7.5

5y ago

jsoup is a Java library for working with HTML

jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that c…

▾ Twilightjsoup · jsoupEPSS 6.7%via NVD

CVE-2015-6748Medium· 6.1PoC

9y ago

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

▾ Twilightjsoup · jsoupEPSS 2.2%via NVD