Skip to content

Commit 4dedd76

Browse files
reeshika-hclaude
andcommitted
fix: upgrade jsoup to 1.23.2 to address Snyk resource allocation vulnerability
jsoup 1.23.1 is flagged by Snyk (CVE-2026-75140) for unbounded memory growth in XmlTreeBuilder's namespace scope tracking. Fixed upstream in 1.23.2 via a rewritten NamespaceBindings scope tracker that replaces the per-element namespace-map copy. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 410fc0f commit 4dedd76

2 files changed

Lines changed: 8 additions & 2 deletions

File tree

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,12 @@
22

33
A brief description of what changes project contains
44

5+
## Aug 26, 2026
6+
7+
#### v1.6.2
8+
9+
- Fix: Upgraded `org.jsoup:jsoup` to 1.23.2 to address a Snyk-reported Allocation of Resources Without Limits or Throttling vulnerability (CVE-2026-75140)
10+
511
## Aug 17, 2026
612

713
#### v1.6.1

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
<modelVersion>4.0.0</modelVersion>
55
<groupId>com.contentstack.sdk</groupId>
66
<artifactId>utils</artifactId>
7-
<version>1.6.1</version>
7+
<version>1.6.2</version>
88
<packaging>jar</packaging>
99
<name>Contentstack-utils</name>
1010
<description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -20,7 +20,7 @@
2020
<maven-source-plugin.version>2.2.1</maven-source-plugin.version>
2121
<maven-javadoc-plugin.version>3.1.1</maven-javadoc-plugin.version>
2222
<junit.version>4.13.2</junit.version>
23-
<jsoup.version>1.23.1</jsoup.version>
23+
<jsoup.version>1.23.2</jsoup.version>
2424
<json.simple.version>1.1.1</json.simple.version>
2525
<maven-site-plugin.version>3.3</maven-site-plugin.version>
2626
<maven-gpg-plugin.version>1.5</maven-gpg-plugin.version>

0 commit comments

Comments
 (0)