PatchTheCVEjsoup vulnerabilities and fixes
Recent CVEs affecting jsoup, with upgrade or downgrade steps. 3 tracked.
jsoup has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-08-29. Highest priority: CVE-2021-37714 (score 55/100).
- CVE-2015-6748 MEDIUM 6.1 UPGRADE MITIGATE Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.
- CVE-2021-37714 HIGH 7.5 UPGRADE UPGRADE jsoup is a Java library for working with HTML
- CVE-2022-36033 MEDIUM 6.1 UPGRADE MITIGATE jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety
FAQ
How do I fix jsoup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jsoup being exploited right now?
None of the tracked jsoup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jsoup CVE should I patch first?
CVE-2021-37714 currently ranks highest (55/100): jsoup is a Java library for working with HTML.