Commit 2fedd9c
fix: upgrade jsoup dependency to version 1.23.2
jsoup 1.23.1 is flagged by Snyk (CVE-2026-75140) for unbounded memory
growth in XmlTreeBuilder's namespace scope tracking. Fixed upstream in
1.23.2 via a rewritten NamespaceBindings scope tracker that replaces the
per-element namespace-map copy.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>1 parent ed563f0 commit 2fedd9c
2 files changed
Lines changed: 8 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
3 | 9 | | |
4 | 10 | | |
5 | 11 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| |||
214 | 214 | | |
215 | 215 | | |
216 | 216 | | |
217 | | - | |
| 217 | + | |
218 | 218 | | |
219 | 219 | | |
220 | 220 | | |
| |||
0 commit comments