Skip to content

Commit 2fedd9c

Browse files
reeshika-hclaude
andcommitted
fix: upgrade jsoup dependency to version 1.23.2
jsoup 1.23.1 is flagged by Snyk (CVE-2026-75140) for unbounded memory growth in XmlTreeBuilder's namespace scope tracking. Fixed upstream in 1.23.2 via a rewritten NamespaceBindings scope tracker that replaces the per-element namespace-map copy. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent ed563f0 commit 2fedd9c

2 files changed

Lines changed: 8 additions & 2 deletions

File tree

changelog.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,11 @@
11
# Changelog
22

3+
## v1.14.1
4+
5+
### Aug 26, 2026
6+
7+
- Fix: Upgraded `org.jsoup:jsoup` to 1.23.2 to address a Snyk-reported Allocation of Resources Without Limits or Throttling vulnerability (CVE-2026-75140)
8+
39
## v1.14.0
410

511
### Aug 24, 2026

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<artifactId>cms</artifactId>
88
<packaging>jar</packaging>
99
<name>contentstack-management-java</name>
10-
<version>1.14.0</version>
10+
<version>1.14.1</version>
1111
<description>Contentstack Java Management SDK for Content Management API, Contentstack is a headless CMS with an
1212
API-first approach
1313
</description>
@@ -214,7 +214,7 @@
214214
<dependency>
215215
<groupId>org.jsoup</groupId>
216216
<artifactId>jsoup</artifactId>
217-
<version>1.23.1</version>
217+
<version>1.23.2</version>
218218
</dependency>
219219
<dependency>
220220
<groupId>org.jetbrains.kotlin</groupId>

0 commit comments

Comments
 (0)