https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:57:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-71497 <p><strong>Affected:</strong> jhy jsoup</p> <p>jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup&#39;s HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup&#39;s built-in Safelists are not affected. This issue is fixed in version 1.23.1.</p> <p><strong>Affected:</strong> jhy jsoup</p> <p>jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup&#39;s HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup&#39;s built-in Safelists are not affected. This issue is fixed in version 1.23.1.</p> https://vulnerability.circl.lu/vuln/cve-2026-71497