sonatype-2026-005445 Security Details

CVE ID

sonatype-2026-005445

CWE

N/A

CVE Description

org.jsoup:jsoup - Cross-Site Scripting (XSS) [CVE-2026-71497]

Published

Jul 31, 2026

CVSS Score & Severity

5.1Medium

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/jsoup/parser/TagSet.valueOf(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Z)Lorg/jsoup/parser/Tag;

JVM

org/jsoup/parser/Token$StartTag.nameAttr(Ljava/lang/String;Lorg/jsoup/nodes/Attributes;)Lorg/jsoup/parser/Token$StartTag;

JVM

org/jsoup/parser/Token$Tag.appendTagName(Ljava/lang/String;)V

JVM

org/jsoup/parser/Token$Tag.name(Ljava/lang/String;)Lorg/jsoup/parser/Token$Tag;

JVM

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · jhy/jsoupPROJECT