RHLW-2026-dc6bb5cbbfc647ed
Dashboard / Vulnerabilities / RHLW-2026-dc6bb5cbbfc647ed
RHLW-2026-dc6bb5cbbfc647ed
Summary: Lightwell Security Advisory: jsoup 1.22.1.rhlw-00002
Details: Red Hat Lightwell has released org.jsoup:jsoup 1.22.1.rhlw-00002 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched artifact is a drop-in replacement for org.jsoup:jsoup 1.22.1 from Maven Central.
References: https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71497.json, https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8, https://nvd.nist.gov/vuln/detail/CVE-2026-71497, https://github.com/jhy/jsoup/issues/2538, https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70, https://github.com/advisories/GHSA-pmhh-3w7g-xqp8, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75140.json, https://nvd.nist.gov/vuln/detail/CVE-2026-75140, https://github.com/jhy/jsoup/pull/2556, https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a, https://github.com/jhy/jsoup, https://github.com/advisories/GHSA-65r4-943x-97jj
Affected packages
Package
Name: org.jsoup:jsoup
Purl: pkg:maven/org.jsoup/jsoup
Affected ranges
Type: ECOSYSTEM
Events:
