https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-36033.htmlhttps://patchthecve.com/cve/CVE-2022-36033.htmlWed, 17 Jun 2026 04:52:46 +0000MEDIUM 6.1: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default `SafeList.preservhttps://patchthecve.com/cve/CVE-2021-37714.htmlhttps://patchthecve.com/cve/CVE-2021-37714.htmlThu, 08 Oct 2026 21:17:38 +0000HIGH 7.5: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancellehttps://patchthecve.com/cve/CVE-2015-6748.htmlhttps://patchthecve.com/cve/CVE-2015-6748.htmlThu, 08 Oct 2026 22:16:37 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.