From 2fedd9c08e8d31bb3c7ed28909dd8b0a4927c5da Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Wed, 26 Aug 2026 14:32:19 +0530
Subject: [PATCH] fix: upgrade jsoup dependency to version 1.23.2

jsoup 1.23.1 is flagged by Snyk (CVE-2026-75140) for unbounded memory
growth in XmlTreeBuilder's namespace scope tracking. Fixed upstream in
1.23.2 via a rewritten NamespaceBindings scope tracker that replaces the
per-element namespace-map copy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 changelog.md | 6 ++++++
 pom.xml      | 4 ++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/changelog.md b/changelog.md
index ab2ca4b9..118dbb93 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## v1.14.1
+
+### Aug 26, 2026
+
+- Fix: Upgraded `org.jsoup:jsoup` to 1.23.2 to address a Snyk-reported Allocation of Resources Without Limits or Throttling vulnerability (CVE-2026-75140)
+
 ## v1.14.0
 
 ### Aug 24, 2026
diff --git a/pom.xml b/pom.xml
index d053614f..056f6622 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
     <artifactId>cms</artifactId>
     <packaging>jar</packaging>
     <name>contentstack-management-java</name>
-    <version>1.14.0</version>
+    <version>1.14.1</version>
     <description>Contentstack Java Management SDK for Content Management API, Contentstack is a headless CMS with an
         API-first approach
     </description>
@@ -214,7 +214,7 @@
          <dependency>
             <groupId>org.jsoup</groupId>
             <artifactId>jsoup</artifactId>
-            <version>1.23.1</version>
+            <version>1.23.2</version>
         </dependency>
         <dependency>
             <groupId>org.jetbrains.kotlin</groupId>