Skip to content
OpenAdvisories

Package · Azure Linux

jsoup

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

    jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that l…