Vulnerabilities

TI-2022-16458 CVE-2022-36033 · GHSA-gp7f-rwcx-9369

jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

MEDIUM 60

jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01643 Published 2022-08-29 Partial fix · 1.15.3 CWE-79

TI-2021-15589 CVE-2021-37714 · GHSA-m72m-mhq2-9p6c

MEDIUM 48

jsoup is a Java library for working with HTML.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06689 Published 2021-08-18 Partial fix · 1.14.2 CWE-248

TI-2015-05661 CVE-2015-6748 · GHSA-48rh-qgjr-xfj6

LOW 32

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02195 Published 2017-09-25 Partial fix · 1.8.3 CWE-79