Skip to content
OpenAdvisories

Package · Ubuntu

jsoup

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-71497

    jsoup: Cleaner may expose markup with custom raw-text elements

    jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a…

    jhy jsoup org.jsoup:jsoup jsoup Debian Ubuntu Maven
  • Medium 6.1
    CVE-2022-36033

    jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

    jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that l…

    jhy jsoup org.jsoup:jsoup jsoup Debian Ubuntu Maven