jsoup has 3 CVEs on record between 2017 and 2026. 1 was published in the last 90 days. The median CVSS is 6.1 (medium). Most affected products: jsoup (2), org.jsoup:jsoup (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- jsoup 2
- org.jsoup:jsoup 1
jsoup vulnerabilities
CVEs affecting jsoup, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-71497Medium· 4.7jsoup is a Java library for working with real-world HTML
jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a dif…
CVE-2021-37714High· 7.5jsoup is a Java library for working with HTML
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that c…
CVE-2015-6748Medium· 6.1PoCCross-site scripting (XSS) vulnerability in jsoup before 1.8.3.
Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.