jhy jsoup
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-71497 | >= 1.14.3, < 1.23.1 | jsoup: Cleaner may expose markup with custom raw-text elements | MEDIUM 4.7 | 0.3 % | ||
| CVE-2022-36033 | < 1.15.3 | jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled | MEDIUM 6.1 | 1.6 % | ||
| CVE-2021-37714 | < 1.14.2 | Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions | HIGH 7.5 | 6.7 % |