CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

CVE-2026-75140: Allocation of Resources Without Limits or Throttling

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

PT-2026-98971

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

PT-2026-79054

Name of the Vulnerable Software and Affected Versions jsoup versions prior to 1.23.2 Description An uncontrolled resource consumption issue exists in the XmlTreeBuilder function. A remote attacker can exhaust JVM heap memory by providing a deeply nested XML document containing uniquely-namespaced...

CVE-2026-75140: Allocation of Resources Without Limits or Throttling

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

jsoup:XmlFuzzer: Uncaught exception in org.jsoup.parser.XmlTreeBuilder.process

Project: https://github.com/jhy/jsoup.git Detailed Report: https://oss-fuzz.com/testcase?key=5288915671056384 Project: jsoup Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjsoup Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...