ROOT-APP-MAVEN-CVE-2026-75140 CVE-2026-75140 in org.jsoup:jsoup - Patched by Root

Root has patched CVE-2026-75140 in the org.jsoup:jsoup package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-PI17373 jsoup through 1

CVE-2026-75140 affects multiple packages. jsoup through 1. See references for individual vulnerability details...

ai.ancf.lmos:arc-reader-html (>=0.1.1, <=0.120.0), ai.ancf.lmos:arc-runner (>=0.104.0, <=0.120.0) +17176 more potentially affected by CVE-2026-75140 via org.jsoup:jsoup (>=1.2.3, <=1.23.1)

org.jsoup:jsoup MAVEN version =1.2.3, =0.1.1, =0.104.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.7.0, =1.7.0, =1.7.0, =2.0.0 and more Source cves: CVE-2026-75140 Source advisory: SNYK:JAVA-ORGJSOUP-19233597...

co.cask.cdap:wikipediapipeline (>=3.1.0, <=5.1.2) potentially affected by CVE-2026-75140 via org.jsoup:jsoup (0.2.2)

org.jsoup:jsoup MAVEN version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsoup:jsoup and may be impacted: - co.cask.cdap:wikipediapipeline =3.1.0, =5.1.2 Source cves: CVE-2026-75140 Source advisory: OSV:GHSA-65R4-943X-97JJ...

CVE-2026-75140

creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjpvckg5f26...

CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

UBUNTU-CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...