https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:13:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05361 bdu:2023-05361 https://cve.radiocsirt.org/vuln/bdu:2023-05361 https://cve.radiocsirt.org/vuln/certfr-2021-avi-948 certfr-2021-avi-948 https://cve.radiocsirt.org/vuln/certfr-2021-avi-948 https://cve.radiocsirt.org/vuln/euvd-2026-29946 EUVD-2026-29946 https://cve.radiocsirt.org/vuln/euvd-2026-29946 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37714 <p>jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.</p> <p>jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37714 https://cve.radiocsirt.org/vuln/ghsa-m72m-mhq2-9p6c <p><strong>Affected:</strong> Maven: org.jsoup:jsoup</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_ Those using jsoup to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack.</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to jsoup 1.14.2</p> <p>### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ Users may rate limit input parsing. Users should limit the size of inputs based on system resources. Users should implement thread watchdogs to cap and timeout parse runtimes.</p> <p><strong>Affected:</strong> Maven: org.jsoup:jsoup</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_ Those using jsoup to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack.</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to jsoup 1.14.2</p> <p>### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ Users may rate limit input parsing. Users should limit the size of inputs based on system resources. Users should implement thread watchdogs to cap and timeout parse runtimes.</p> https://cve.radiocsirt.org/vuln/ghsa-m72m-mhq2-9p6c https://cve.radiocsirt.org/vuln/gsd-2021-37714 gsd-2021-37714 https://cve.radiocsirt.org/vuln/gsd-2021-37714 https://cve.radiocsirt.org/vuln/msrc_cve-2021-37714 msrc_CVE-2021-37714 https://cve.radiocsirt.org/vuln/msrc_cve-2021-37714 https://cve.radiocsirt.org/vuln/oesa-2021-1335 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jsoup, openEuler:20.03-LTS-SP2: jsoup</p> <p>jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. Security Fix(es): jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.(CVE-2021-37714)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jsoup, openEuler:20.03-LTS-SP2: jsoup</p> <p>jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. Security Fix(es): jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.(CVE-2021-37714)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1335 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10882-1 <p>jsoup-1.14.2-1.2 on GA media</p> <p>jsoup-1.14.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10882-1 https://cve.radiocsirt.org/vuln/rhsa-2021:4676 <p>undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users resteasy: Error message exposes endpoint class information mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck</p> <p>undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users resteasy: Error message exposes endpoint class information mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4676 https://cve.radiocsirt.org/vuln/suse-su-2022:1265-1 <p>Security update for jsoup, jsr-305</p> <p>Security update for jsoup, jsr-305</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1265-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37714 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jsoup, Ubuntu:16.04:LTS: jsoup, Ubuntu:18.04:LTS: jsoup, Ubuntu:20.04:LTS: jsoup, Ubuntu:22.04:LTS: jsoup</p> <p>jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jsoup, Ubuntu:16.04:LTS: jsoup, Ubuntu:18.04:LTS: jsoup, Ubuntu:20.04:LTS: jsoup, Ubuntu:22.04:LTS: jsoup</p> <p>jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37714 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0726 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Vertraulichkeit und Integrität zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Vertraulichkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0726