Skip to content

Commit 99585e3

Browse files
authored
Merge pull request #156 from contentstack/fix/jsoup-cve-2026-75140
fix: upgrade jsoup to 1.23.2 to address Snyk resource allocation vulnerability
2 parents 410fc0f + 4dedd76 commit 99585e3

2 files changed

Lines changed: 8 additions & 2 deletions

File tree

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,12 @@
22

33
A brief description of what changes project contains
44

5+
## Aug 26, 2026
6+
7+
#### v1.6.2
8+
9+
- Fix: Upgraded `org.jsoup:jsoup` to 1.23.2 to address a Snyk-reported Allocation of Resources Without Limits or Throttling vulnerability (CVE-2026-75140)
10+
511
## Aug 17, 2026
612

713
#### v1.6.1

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
<modelVersion>4.0.0</modelVersion>
55
<groupId>com.contentstack.sdk</groupId>
66
<artifactId>utils</artifactId>
7-
<version>1.6.1</version>
7+
<version>1.6.2</version>
88
<packaging>jar</packaging>
99
<name>Contentstack-utils</name>
1010
<description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -20,7 +20,7 @@
2020
<maven-source-plugin.version>2.2.1</maven-source-plugin.version>
2121
<maven-javadoc-plugin.version>3.1.1</maven-javadoc-plugin.version>
2222
<junit.version>4.13.2</junit.version>
23-
<jsoup.version>1.23.1</jsoup.version>
23+
<jsoup.version>1.23.2</jsoup.version>
2424
<json.simple.version>1.1.1</json.simple.version>
2525
<maven-site-plugin.version>3.3</maven-site-plugin.version>
2626
<maven-gpg-plugin.version>1.5</maven-gpg-plugin.version>

0 commit comments

Comments
 (0)