RHLW-2026-66F17E66F457E38B Lightwell Security Advisory: jsoup 1.16.1.rhlw-00004

Red Hat Lightwell has released org.jsoup:jsoup 1.16.1.rhlw-00004 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

RHLW-2026-1AF9ECF859C7DFB4 Lightwell Security Advisory: jsoup 1.17.1.rhlw-00007

Red Hat Lightwell has released org.jsoup:jsoup 1.17.1.rhlw-00007 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-75140

Summary Vulnerability in jsoup.jar in IBM Integration Designer: CVE-2026-75140 Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhau...

RHLW-2026-DC6BB5CBBFC647ED Lightwell Security Advisory: jsoup 1.22.1.rhlw-00002

Red Hat Lightwell has released org.jsoup:jsoup 1.22.1.rhlw-00002 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

Security update for jsoup

This update for jsoup fixes the following issue: CVE-2026-75140: denial of service due to uncontrolled resource consumption in XmlTreeBuilder bsc1275912. Changes for jsoup: Updated to version 1.23.2. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows...

Atlassian Jira Service Management Data Center and Server 3.0.x < 10.3.26 / 10.4.x < 11.3.12 (JSDSERVER-16837)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16837 advisory. - jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.2 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.4.23, 10.2.6, and 10.4.2 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.24, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.24 and 11.3.9 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacke...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.2.22 and 12.1.10 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to...

Security Bulletin: Security Vulnerability identified in jsoup used by IBM Maximo Application Suite - MREF ( CVE-2026-75140 )

Summary There is a vulnerability in jsoup-1.23.1.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote...

org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents

A flaw was found in jsoup. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the XmlTreeBuilder by providing a deeply nested XML document with uniquely-namespaced elements. This causes the builder to copy the entire inherited namespace map on every start elemen...

org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents

A flaw was found in jsoup. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the XmlTreeBuilder by providing a deeply nested XML document with uniquely-namespaced elements. This causes the builder to copy the entire inherited namespace map on every start elemen...

DoS (Denial of Service) at org.jsoup:jsoup Dependency in Crucible Server

This High severity DoS Denial of Service vulnerability was introduced in version 4.9.0 of Crucible Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N allows an unauthenticated attacker to...

CVE-2026-75140

A flaw was found in jsoup. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the XmlTreeBuilder by providing a deeply nested XML document with uniquely-namespaced elements. This causes the builder to copy the entire inherited namespace map on every start elemen...

SUSE CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

Allocation of Resources Without Limits or Throttling

Overview org.jsoup:jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern...

Linux Distros Unpatched Vulnerability : CVE-2026-75140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to...